Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 19

Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-20916
CWE-22 Medium
No
No
- 04.09.2020 SB2020090420
SB2020112328
SB2020122208
and 29 more
#VU32881 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-20907
CWE-835 Medium
No
No
- 29.07.2020 SB2020071324
SB2020080201
SB2020082408
and 53 more
#VU29116 - Out-of-bounds read
CVE-2019-20454
CWE-125 Medium
No
No
- 17.06.2020 SB2020021421
SB2020061707
SB2020110528
and 14 more
#VU30281 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-20807
CWE-78 Low
No
No
- 28.05.2020 SB2020052815
SB2020061148
SB2020110918
and 9 more
#VU27033 - Out-of-bounds write
CVE-2020-1751
CWE-787 High
No
No
- 20.04.2020 SB2020040708
SB2020061304
SB2020110915
and 14 more
#VU26756 - Resource Management Errors
CVE-2020-1730
CWE-399 Medium
No
No
- 10.04.2020 SB2020041003
SB2020041004
SB2020041005
and 25 more
#VU26432 - Business Logic Errors (3.0)
CVE-2020-3885
CWE-840 Low
No
No
- 27.03.2020 SB2020032715
SB2020032719
SB2020051104
and 8 more
#VU26428 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3894
CWE-362 Medium
Available
No
- 27.03.2020 SB2020032715
SB2020032719
SB2020051104
and 8 more
#VU26426 - Memory corruption
CVE-2020-3895
CWE-119 High
No
No
- 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26422 - Type confusion
CVE-2020-3897
CWE-843 High
No
No
- 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU25382 - Memory corruption
CVE-2020-3868
CWE-119 High
No
No
- 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3867
CWE-79 Medium
No
No
- 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25380 - Origin Validation Error
CVE-2020-3865
CWE-346 Medium
No
No
- 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25379 - Origin Validation Error
CVE-2020-3864
CWE-346 Medium
No
No
- 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25375 - Memory corruption
CVE-2020-3862
CWE-119 Low
No
No
- 14.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU24958 - Out-of-bounds read
CVE-2020-6405
CWE-125 Medium
No
No
- 05.02.2020 SB2019122301
SB2020020601
SB2020020614
and 22 more
#VU24490 - Out-of-bounds read
CVE-2019-20387
CWE-125 Medium
No
No
- 22.01.2020 SB2020012221
SB2020110530
SB2020112328
and 7 more
#VU24489 - Missing release of memory after effective lifetime
CVE-2019-19956
CWE-401 Medium
No
No
- 22.01.2020 SB2019122405
SB2020021011
SB2020052301
and 24 more
#VU24487 - Missing release of memory after effective lifetime
CVE-2019-20388
CWE-401 Medium
No
No
- 22.01.2020 SB2020012220
SB2020052301
SB2020062607
and 28 more
#VU24065 - Missing release of memory after effective lifetime
CVE-2019-20218
CWE-401 Low
No
No
- 07.01.2020 SB2019122301
SB2020072756
SB2020110913
and 13 more


Showing elements 361 - 380 out of 476