Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 17

Vendor: Red Hat Inc.
Software: OpenShift Data Foundation (formerly OpenShift Container Storage)
Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72630 - Incorrect Default Permissions
CVE-2022-3650		 CWE-276 Low
No
No
 4.12.1 28.02.2023 SB2023022857
SB2023022873
SB2023030907
and 10 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916		 CWE-770 Medium
No
No
 4.11.7, 4.12.2 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 4.11.7, 4.12.2 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 4.11.0 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 4.11.0 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU64508 - Out-of-bounds read
CVE-2022-1927		 CWE-125 Low
No
No
 4.11.0 20.06.2022 SB2022062022
SB2022080332
SB2022080610
and 49 more
#VU64506 - Out-of-bounds write
CVE-2022-1897		 CWE-787 Low
No
No
 4.11.0 20.06.2022 SB2022062022
SB2022070807
SB2022080332
and 48 more
#VU63487 - Out-of-bounds write
CVE-2022-1785		 CWE-787 High
No
No
 4.11.0 20.05.2022 SB2022052017
SB2022062022
SB2022063027
and 47 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782		 CWE-303 Medium
No
No
 4.11.0 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Available
No
 4.11.0 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU62741 - Integer overflow
CVE-2022-29824		 CWE-190 High
No
No
 4.11.0 03.05.2022 SB2022050305
SB2022050306
SB2022050307
and 73 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776		 CWE-200 Low
No
No
 4.11.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU62641 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27774		 CWE-200 Medium
No
No
 4.11.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 57 more
#VU62640 - Improper Authentication
CVE-2022-22576		 CWE-287 Medium
No
No
 4.11.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 60 more
#VU62036 - Unchecked Return Value
CVE-2022-23806		 CWE-252 Medium
No
No
 4.11.0 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU60738 - Integer overflow
CVE-2022-25314		 CWE-190 Medium
No
No
 4.11.0 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU60737 - Stack-based buffer overflow
CVE-2022-25313		 CWE-121 High
No
No
 4.11.0 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 64 more
#VU60087 - Improper input validation
CVE-2021-23440		 CWE-20 High
No
No
 4.11.0 27.01.2022 SB2022012755
SB2022082512
SB2023060703
and 5 more
#VU56685 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-40528		 CWE-327 Medium
No
No
 4.11.0 17.09.2021 SB2021091710
SB2021091711
SB2021091629
and 44 more
#VU20426 - Resource exhaustion
CVE-2019-10747		 CWE-400 Medium
No
No
 4.11.0 28.08.2019 SB2019082316
SB2022082512
SB2020110621
and 5 more


Showing elements 321 - 340 out of 476