Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 14

Vendor: Red Hat Inc.
Software: OpenShift Data Foundation (formerly OpenShift Container Storage)
Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4231		 CWE-79 Low
No
No
 4.13.0 16.06.2023 SB2022052637
SB2023061625
SB2023062315
and 3 more
#VU74186 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25000		 CWE-200 Medium
No
No
 4.13.0 30.03.2023 SB2023033012
SB2023051810
SB2023062140
and 2 more
#VU74184 - Improper input validation
CVE-2023-0665		 CWE-20 Medium
No
No
 4.13.0 30.03.2023 SB2023033012
SB2023051810
SB2023062140
and 2 more
#VU74183 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-0620		 CWE-89 Medium
No
No
 4.13.0 30.03.2023 SB2023033012
SB2023051810
SB2023062140
and 2 more
#VU73722 - Resource exhaustion
CVE-2022-41725		 CWE-400 Medium
No
No
 4.13.0 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU73246 - Improper Access Control
CVE-2023-24999		 CWE-284 Low
No
No
 4.13.0 11.03.2023 SB2023031101
SB2023062140
SB2023062315
and 2 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 4.13.0, 4.14.0 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72685 - Resource Management Errors
CVE-2022-41724		 CWE-399 Medium
No
No
 4.13.0 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU72632 - Use After Free
CVE-2021-44964		 CWE-416 Medium
No
No
 4.13.0 28.02.2023 SB2023022860
SB2023022866
SB2023031437
and 3 more
#VU72631 - Stack-based buffer overflow
CVE-2021-43519		 CWE-121 Medium
No
No
 4.13.0 28.02.2023 SB2021110953
SB2023022866
SB2023031437
and 4 more
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175		 CWE-94 Medium
No
No
 4.13.0 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 44 more
#VU68858 - Off-by-one Error
CVE-2021-46848		 CWE-193 Medium
No
No
 4.13.0 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU67554 - Server-Side Request Forgery (SSRF)
CVE-2022-3172		 CWE-918 Medium
No
No
 4.12.4 21.09.2022 SB2022092138
SB2022102614
SB2023011939
and 23 more
#VU67545 - Resource Management Errors
CVE-2022-2795		 CWE-399 Medium
No
No
 4.11.9, 4.12.4, 4.13.0 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 71 more
#VU66152 - Resource exhaustion
CVE-2021-46828		 CWE-400 Medium
No
No
 4.13.0 07.08.2022 SB2022080701
SB2022080703
SB2022090161
and 20 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107		 CWE-78 High
No
No
 4.13.0 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU64075 - Out-of-bounds write
CVE-2022-1304		 CWE-787 Low
No
No
 4.13.0 08.06.2022 SB2022060814
SB2022060815
SB2022060830
and 66 more
#VU62002 - Improper input validation
CVE-2022-1271		 CWE-20 High
No
No
 4.13.0 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 4.13.0 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU48269 - Security Features
CVE-2020-17049		 CWE-254 Low
No
No
 4.13.0 10.11.2020 SB2020111029
SB2021111015
SB2022121006
and 18 more


Showing elements 261 - 280 out of 476