Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 16

Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4231
CWE-79 Low
No
No
4.13.0 16.06.2023 SB2022052637
SB2023061625
SB2023062315
and 3 more
#VU74578 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28617
CWE-78 High
No
No
4.12.3 06.04.2023 SB2023040682
SB2023040684
SB2023042105
and 20 more
#VU74186 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25000
CWE-200 Medium
No
No
4.13.0 30.03.2023 SB2023033012
SB2023051810
SB2023062140
and 2 more
#VU74184 - Improper input validation
CVE-2023-0665
CWE-20 Medium
No
No
4.13.0 30.03.2023 SB2023033012
SB2023051810
SB2023062140
and 2 more
#VU74183 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-0620
CWE-89 Medium
No
No
4.13.0 30.03.2023 SB2023033012
SB2023051810
SB2023062140
and 2 more
#VU73722 - Resource exhaustion
CVE-2022-41725
CWE-400 Medium
No
No
4.13.0 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU73246 - Improper Access Control
CVE-2023-24999
CWE-284 Low
No
No
4.13.0 11.03.2023 SB2023031101
SB2023062140
SB2023062315
and 2 more
#VU72685 - Resource Management Errors
CVE-2022-41724
CWE-399 Medium
No
No
4.13.0 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU71996 - Double Free
CVE-2022-4450
CWE-415 Medium
No
No
4.11.7, 4.12.2 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
4.11.7, 4.12.2 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
4.11.7, 4.12.2 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175
CWE-94 Medium
No
No
4.13.0 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 46 more
#VU71180 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23539
CWE-327 Medium
No
No
4.12.3 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717
CWE-770 Medium
Available
No
4.12.2, 4.13.0 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999
CWE-94 Medium
Available
No
4.12.3 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 50 more
#VU67554 - Server-Side Request Forgery (SSRF)
CVE-2022-3172
CWE-918 Medium
No
No
4.12.4 21.09.2022 SB2022092138
SB2022102614
SB2023011939
and 23 more
#VU67534 - Permissions, Privileges, and Access Controls
CVE-2022-40186
CWE-264 Low
No
No
4.11.7 21.09.2022 SB2022092124
SB2022112521
SB2023042647
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107
CWE-78 High
No
No
4.13.0 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU61671 - Memory corruption
CVE-2018-25032
CWE-119 Medium
No
No
4.13.0 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU48269 - Security Features
CVE-2020-17049
CWE-254 Low
No
No
4.13.0 10.11.2020 SB2020111029
SB2021111015
SB2022121006
and 18 more


Showing elements 301 - 320 out of 476