Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 14

Vendor: Red Hat Inc.
Software: OpenShift Data Foundation (formerly OpenShift Container Storage)
Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 4.11.7, 4.12.1, 4.12.2, 4.13.0 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU71182 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23540		 CWE-327 High
Available
No
 4.13.0 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 15 more
#VU71181 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23541		 CWE-327 High
No
No
 4.13.0 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU69942 - Incorrect Regular Expression
CVE-2022-3517		 CWE-185 Medium
No
No
 4.13.0 06.12.2022 SB2022120638
SB2022120639
SB2022120640
and 50 more
#VU69391 - Deserialization of Untrusted Data
CVE-2022-42919		 CWE-502 Low
No
No
 4.13.0 16.11.2022 SB2022111649
SB2022111655
SB2022111656
and 35 more
#VU69337 - Integer overflow
CVE-2022-42898		 CWE-190 Medium
No
No
 4.13.0 15.11.2022 SB2022111530
SB2022111610
SB2022111621
and 123 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 4.13.0 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU68387 - Resource Management Errors
CVE-2022-2879		 CWE-399 Medium
No
No
 4.13.0 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU67971 - Use After Free
CVE-2022-42012		 CWE-416 Low
No
No
 4.13.0 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 57 more
#VU67970 - Out-of-bounds read
CVE-2022-42011		 CWE-125 Low
No
No
 4.13.0 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 57 more
#VU67969 - Reachable Assertion
CVE-2022-42010		 CWE-617 Low
No
No
 4.13.0 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 58 more
#VU67556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-32190		 CWE-22 Medium
No
No
 4.13.0 21.09.2022 SB2022091520
SB2022092146
SB2022092946
and 33 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 4.13.0 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66680 - Information Exposure Through Log Files
CVE-2022-38149		 CWE-532 Medium
No
No
 4.13.0 22.08.2022 SB2022082210
SB2023062315
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 4.13.0 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 4.13.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU65553 - Out-of-bounds read
CVE-2022-1587		 CWE-125 Medium
No
No
 4.13.0 20.07.2022 SB2022060210
SB20220720108
SB2022072733
and 24 more
#VU63693 - Incorrect Default Permissions
CVE-2022-1348		 CWE-276 Low
No
No
 4.13.0 26.05.2022 SB2022052608
SB2022052621
SB2022071423
and 9 more
#VU59551 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21824		 CWE-94 Medium
No
No
 4.13.0 12.01.2022 SB2022011216
SB2022041205
SB2022060315
and 39 more
#VU46232 - Improper Authentication
CVE-2020-16250		 CWE-287 High
No
No
 4.13.0 26.08.2020 SB2020101004
SB2023062315
SB2023062316


Showing elements 261 - 280 out of 476