Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 12

Vendor: Red Hat Inc.
Software: OpenShift Data Foundation (formerly OpenShift Container Storage)
Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75915 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-2491		 CWE-78 High
No
No
 4.11.9, 4.12.4, 4.13.0 09.05.2023 SB20230509106
SB2023051666
SB2023042426
and 17 more
#VU74146 - Improper Privilege Management
CVE-2023-26604		 CWE-269 Low
No
No
 4.10.14, 4.11.9, 4.12.5 28.03.2023 SB2023032869
SB2023032871
SB2023040540
and 56 more
#VU73828 - State Issues
CVE-2023-27535		 CWE-371 Low
No
No
 4.11.9, 4.12.3, 4.12.4 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU71531 - Reachable Assertion
CVE-2022-3924		 CWE-617 Medium
No
No
 4.13.0 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 19 more
#VU71530 - Improper input validation
CVE-2022-3736		 CWE-20 Medium
No
No
 4.13.0 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 18 more
#VU71454 - Heap-based Buffer Overflow
CVE-2022-3715		 CWE-122 Low
No
No
 4.13.0 23.01.2023 SB2023012382
SB2023012383
SB2023021625
and 14 more
#VU70461 - Improper Privilege Management
CVE-2022-4415		 CWE-269 Low
No
No
 4.11.7, 4.12.1, 4.12.2, 4.13.0 21.12.2022 SB2022122140
SB2022122735
SB2022122816
and 70 more
#VU69807 - Off-by-one Error
CVE-2022-3821		 CWE-193 Low
No
No
 4.13.0 01.12.2022 SB2022120139
SB2022120141
SB2022120143
and 50 more
#VU69582 - NULL Pointer Dereference
CVE-2022-36227		 CWE-476 Low
No
No
 4.11.9, 4.12.3, 4.12.4, 4.13.0 24.11.2022 SB2022112432
SB2022112437
SB2022112438
and 77 more
#VU68952 - Heap-based Buffer Overflow
CVE-2022-33099		 CWE-122 Medium
No
No
 4.13.0 02.11.2022 SB2022041112
SB2022110268
SB2023021625
and 7 more
#VU68376 - Integer overflow
CVE-2022-3515		 CWE-190 High
No
No
 4.13.0 18.10.2022 SB2022101805
SB2022101807
SB2022101808
and 64 more
#VU67555 - Incorrect Regular Expression
CVE-2022-40023		 CWE-185 Medium
No
No
 4.11.9, 4.12.3, 4.12.4, 4.13.0 21.09.2022 SB2022092139
SB2022092141
SB2022102426
and 20 more
#VU67545 - Resource Management Errors
CVE-2022-2795		 CWE-399 Medium
No
No
 4.11.9, 4.12.4, 4.13.0 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 71 more
#VU67414 - Improper Validation of Array Index
CVE-2022-35737		 CWE-129 Medium
Available
No
 4.13.0 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU66189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29154		 CWE-22 Low
No
No
 4.13.0 08.08.2022 SB2022080837
SB2022081645
SB2022081649
and 70 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 4.11.0, 4.13.0 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64909 - Improper Verification of Cryptographic Signature
CVE-2022-34903		 CWE-347 Medium
No
No
 4.13.0 04.07.2022 SB2022070429
SB2022070443
SB2022070521
and 58 more
#VU62830 - Heap-based Buffer Overflow
CVE-2022-24903		 CWE-122 High
No
No
 4.13.0 05.05.2022 SB2022050524
SB2022050920
SB2022052425
and 45 more
#VU62053 - Heap-based Buffer Overflow
CVE-2022-28805		 CWE-122 High
No
No
 4.13.0 11.04.2022 SB2022041112
SB2022051320
SB2023050346
and 14 more
#VU62030 - Out-of-bounds read
CVE-2022-26280		 CWE-125 Low
No
No
 4.13.0 09.04.2022 SB2022040901
SB2022040902
SB2022041127
and 11 more


Showing elements 221 - 240 out of 476