Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 10

Vendor: Red Hat Inc.
Software: OpenShift Data Foundation (formerly OpenShift Container Storage)
Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79878 - Incorrect Authorization
CVE-2023-3899		 CWE-863 Low
No
No
 4.13.3 23.08.2023 SB2023082308
SB2023082309
SB2023082310
and 44 more
#VU79799 - Inefficient Regular Expression Complexity
CVE-2023-26115		 CWE-1333 Medium
No
No
 4.13.3 21.08.2023 SB2023082199
SB20230821104
SB2023082858
and 21 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978		 CWE-79 Low
No
No
 4.14.0 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 54 more
#VU78804 - Observable Response Discrepancy
CVE-2023-3462		 CWE-204 Medium
No
No
 4.14.0 01.08.2023 SB2023080108
SB2023112450
SB2024013032
and 2 more
#VU78490 - Permissions, Privileges, and Access Controls
CVE-2023-34969		 CWE-264 Low
No
No
 4.13.3 21.07.2023 SB2023072119
SB2023072121
SB2023072122
and 61 more
#VU78005 - Inadequate Encryption Strength
CVE-2023-3089		 CWE-326 Medium
No
No
 4.10.14, 4.11.9, 4.12.5, 4.13.1 06.07.2023 SB2023070602
SB2023070603
SB2023070604
and 34 more
#VU77780 - Memory corruption
CVE-2020-24736		 CWE-119 Low
No
No
 4.10.14, 4.11.9, 4.12.5 29.06.2023 SB2023062903
SB2023062908
SB2023062968
and 45 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 4.13.3, 4.14.0 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 4.13.1 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540		 CWE-94 Medium
No
No
 4.13.3 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539		 CWE-79 Medium
No
No
 4.14.0 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU75432 - Permissions, Privileges, and Access Controls
CVE-2023-30630		 CWE-264 Low
No
No
 4.13.3, 4.14.0 24.04.2023 SB2023042410
SB2023042412
SB2023042642
and 51 more
#VU75388 - Out-of-bounds read
CVE-2023-1255		 CWE-125 Low
No
No
 4.13.1 20.04.2023 SB2023042039
SB2023053044
SB2023061445
and 25 more
#VU74571 - Resource exhaustion
CVE-2023-24534		 CWE-400 Medium
No
No
 4.14.0 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74149 - Security Features
CVE-2023-0466		 CWE-254 Low
No
No
 4.13.1 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465		 CWE-347 Low
No
No
 4.13.1 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464		 CWE-400 Medium
No
No
 4.13.1 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 4.13.3, 4.14.0 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU72127 - Improper input validation
CVE-2022-46663		 CWE-20 Low
No
No
 4.13.1 11.02.2023 SB2023021105
SB2023021107
SB2023062213
and 12 more
#VU69295 - Out-of-bounds read
CVE-2021-4048		 CWE-125 Medium
No
No
 4.14.0 14.11.2022 SB2021120825
SB2022111436
SB2022032140
and 11 more


Showing elements 181 - 200 out of 476