Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 18

Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64820 - Information Exposure Through Log Files
CVE-2020-8565
CWE-532 Low
No
No
4.9.0 30.06.2022 SB2023053114
SB2023103043
SB2024020523
and 10 more
#VU64805 - Improper input validation
CVE-2021-43565
CWE-20 Medium
No
No
4.10.0 29.06.2022 SB2021120347
SB2022062928
SB2022072127
and 39 more
#VU59042 - Resource exhaustion
CVE-2021-44717
CWE-400 Medium
No
No
4.10.0 16.12.2021 SB2021121610
SB2021121646
SB2022031628
and 32 more
#VU58824 - Improper input validation
CVE-2021-44716
CWE-20 Medium
No
No
4.10.0 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU58206 - Absolute Path Traversal
CVE-2021-32803
CWE-36 Medium
No
No
4.9.0 17.11.2021 SB2021080329
SB2022031104
SB2022060618
and 26 more
#VU58205 - Absolute Path Traversal
CVE-2021-32804
CWE-36 Medium
No
No
4.9.0 17.11.2021 SB2021080328
SB2022031104
SB2022060618
and 27 more
#VU58203 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-37712
CWE-22 Medium
No
No
4.9.0 17.11.2021 SB2021111707
SB2021111710
SB2022031104
and 24 more
#VU58202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-37701
CWE-22 Medium
No
No
4.9.0 17.11.2021 SB2021111706
SB2021111710
SB2022031104
and 24 more
#VU56829 - Improper input validation
CVE-2021-29923
CWE-20 Medium
No
No
4.10.0 22.09.2021 SB2021092225
SB2021092226
SB2021100408
and 37 more
#VU56024 - Resource Management Errors
CVE-2021-33198
CWE-399 Medium
No
No
4.9.0 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 46 more
#VU56023 - Missing Authorization
CVE-2021-33197
CWE-862 Medium
No
No
4.9.0 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 41 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195
CWE-79 Medium
No
No
4.9.0 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-36221
CWE-362 Medium
No
No
4.10.0 10.08.2021 SB2021081001
SB2021081217
SB2021081219
and 32 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558
CWE-295 Medium
Available
No
4.9.0, 4.10.0 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU47225 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7720
CWE-94 Medium
No
No
- 30.09.2020 SB20200930105
SB2020122208
SB2020112518
#VU26628 - Use After Free
CVE-2020-1752
CWE-416 High
No
No
- 07.04.2020 SB2020040708
SB2020040709
SB2020110915
and 18 more
#VU26430 - Memory corruption
CVE-2020-3899
CWE-119 High
No
No
- 27.03.2020 SB2020032715
SB2020032719
SB2020042823
and 12 more
#VU26427 - Memory corruption
CVE-2020-3900
CWE-119 High
No
No
- 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26424 - Type confusion
CVE-2020-3901
CWE-843 High
No
No
- 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU23636 - Unprotected Storage of Credentials
CVE-2019-11250
CWE-256 Low
No
No
4.9.0 17.12.2019 SB2019082909
SB2019121707
SB2019121704
and 15 more


Showing elements 341 - 360 out of 476