Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 13

Vendor: Red Hat Inc.
Software: OpenShift Data Foundation (formerly OpenShift Container Storage)
Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72247 - Improper input validation
CVE-2022-38900		 CWE-20 Medium
No
No
 4.13.0 15.02.2023 SB2023021531
SB2023022714
SB2023032315
and 35 more
#VU71361 - Resource exhaustion
CVE-2021-4235		 CWE-400 Medium
No
No
 4.13.0 19.01.2023 SB2023011937
SB2023011939
SB2023020869
and 13 more
#VU71182 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23540		 CWE-327 High
Available
No
 4.13.0 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 15 more
#VU71181 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23541		 CWE-327 High
No
No
 4.13.0 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU69942 - Incorrect Regular Expression
CVE-2022-3517		 CWE-185 Medium
No
No
 4.13.0 06.12.2022 SB2022120638
SB2022120639
SB2022120640
and 48 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 4.13.0 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68387 - Resource Management Errors
CVE-2022-2879		 CWE-399 Medium
No
No
 4.13.0 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU68254 - Improper Authentication
CVE-2022-41316		 CWE-287 Medium
No
No
 4.13.0 12.10.2022 SB2022101241
SB2022112521
SB2023011939
and 2 more
#VU67556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-32190		 CWE-22 Medium
No
No
 4.13.0 21.09.2022 SB2022091520
SB2022092146
SB2022092946
and 33 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 4.13.0 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66680 - Information Exposure Through Log Files
CVE-2022-38149		 CWE-532 Medium
No
No
 4.13.0 22.08.2022 SB2022082210
SB2023062315
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 4.13.0 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66115 - Permissions, Privileges, and Access Controls
CVE-2021-43998		 CWE-264 Medium
No
No
 4.13.0 04.08.2022 SB2021113020
SB2022080439
SB2023051845
and 1 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 4.13.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU59551 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21824		 CWE-94 Medium
No
No
 4.13.0 12.01.2022 SB2022011216
SB2022041205
SB2022060315
and 39 more
#VU59550 - Improper Certificate Validation
CVE-2021-44533		 CWE-295 Medium
No
No
 4.13.0 12.01.2022 SB2022011216
SB2022041522
SB2022042517
and 36 more
#VU59549 - Improper Validation of Certificate with Host Mismatch
CVE-2021-44532		 CWE-297 Medium
No
No
 4.13.0 12.01.2022 SB2022011216
SB2022041522
SB2022042806
and 36 more
#VU59548 - Improper Certificate Validation
CVE-2021-44531		 CWE-295 Medium
No
No
 4.13.0 12.01.2022 SB2022011216
SB2022032010
SB2022041522
and 35 more
#VU57967 - Improper input validation
CVE-2021-3807		 CWE-20 Medium
No
No
 4.13.0 05.11.2021 SB2021110513
SB2021112603
SB2022042257
and 51 more
#VU46233 - Improper Authentication
CVE-2020-16251		 CWE-287 High
No
No
 4.13.0 26.08.2020 SB2020101005
SB2023051845
SB2023062315


Showing elements 241 - 260 out of 476