Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 11

Vendor: Red Hat Inc.
Software: OpenShift Data Foundation (formerly OpenShift Container Storage)
Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75741 - Improper input validation
CVE-2023-1667		 CWE-20 Medium
No
No
 4.10.14, 4.11.9, 4.12.5 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 75 more
#VU75740 - Improper Authentication
CVE-2023-2283		 CWE-287 High
No
No
 4.10.14, 4.11.9, 4.12.5 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 84 more
#VU74146 - Improper Privilege Management
CVE-2023-26604		 CWE-269 Low
No
No
 4.10.14, 4.11.9, 4.12.5 28.03.2023 SB2023032869
SB2023032871
SB2023040540
and 56 more
#VU72618 - Improper input validation
CVE-2023-24329		 CWE-20 Medium
No
No
 4.10.14, 4.11.9, 4.12.5, 4.13.0, 4.13.1 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU71531 - Reachable Assertion
CVE-2022-3924		 CWE-617 Medium
No
No
 4.13.0 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 19 more
#VU71530 - Improper input validation
CVE-2022-3736		 CWE-20 Medium
No
No
 4.13.0 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 18 more
#VU71529 - Resource exhaustion
CVE-2022-3094		 CWE-400 Medium
No
No
 4.13.0 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 47 more
#VU71454 - Heap-based Buffer Overflow
CVE-2022-3715		 CWE-122 Low
No
No
 4.13.0 23.01.2023 SB2023012382
SB2023012383
SB2023021625
and 14 more
#VU69807 - Off-by-one Error
CVE-2022-3821		 CWE-193 Low
No
No
 4.13.0 01.12.2022 SB2022120139
SB2022120141
SB2022120143
and 50 more
#VU68952 - Heap-based Buffer Overflow
CVE-2022-33099		 CWE-122 Medium
No
No
 4.13.0 02.11.2022 SB2022041112
SB2022110268
SB2023021625
and 7 more
#VU68376 - Integer overflow
CVE-2022-3515		 CWE-190 High
No
No
 4.13.0 18.10.2022 SB2022101805
SB2022101807
SB2022101808
and 64 more
#VU68116 - Inadequate Encryption Strength
CVE-2022-3358		 CWE-326 Medium
Available
No
 4.13.0 11.10.2022 SB2022101132
SB2022110133
SB2022110144
and 12 more
#VU67414 - Improper Validation of Array Index
CVE-2022-35737		 CWE-129 Medium
Available
No
 4.13.0 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU66813 - NULL Pointer Dereference
CVE-2022-2309		 CWE-476 Medium
No
No
 4.13.0 29.08.2022 SB2022082928
SB2022082929
SB2022082930
and 28 more
#VU66189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29154		 CWE-22 Low
No
No
 4.13.0 08.08.2022 SB2022080837
SB2022081645
SB2022081649
and 70 more
#VU65915 - Double Free
CVE-2022-2509		 CWE-415 High
No
No
 4.13.0 02.08.2022 SB2022080207
SB2022080208
SB2022080509
and 54 more
#VU64909 - Improper Verification of Cryptographic Signature
CVE-2022-34903		 CWE-347 Medium
No
No
 4.13.0 04.07.2022 SB2022070429
SB2022070443
SB2022070521
and 58 more
#VU62830 - Heap-based Buffer Overflow
CVE-2022-24903		 CWE-122 High
No
No
 4.13.0 05.05.2022 SB2022050524
SB2022050920
SB2022052425
and 45 more
#VU62053 - Heap-based Buffer Overflow
CVE-2022-28805		 CWE-122 High
No
No
 4.13.0 11.04.2022 SB2022041112
SB2022051320
SB2023050346
and 14 more
#VU62030 - Out-of-bounds read
CVE-2022-26280		 CWE-125 Low
No
No
 4.13.0 09.04.2022 SB2022040901
SB2022040902
SB2022041127
and 11 more


Showing elements 201 - 220 out of 476