Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 2

Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132291 - Resource exhaustion
CVE-2026-48779
CWE-400 Medium
No
No
4.18.25, 4.19.20 25.05.2026 SB2026052550
SB2026062253
SB2026062254
and 6 more
#VU127582 - Allocation of Resources Without Limits or Throttling
CVE-2026-22036
CWE-770 Medium
No
No
4.20.14 24.04.2026 SB20260424138
SB20260424156
SB20260424157
and 9 more
#VU126615 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2026-33036
CWE-776 Medium
No
No
4.18.25, 4.19.20 20.04.2026 SB20260420117
SB2026052512
SB2026052624
and 3 more
#VU125945 - Improper input validation
CVE-2026-34986
CWE-20 Medium
No
No
4.18.25, 4.19.20 14.04.2026 SB2026041463
SB2026041464
SB2026041465
and 74 more
#VU125803 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-4800
CWE-94 High
No
No
4.18.25, 4.19.20 10.04.2026 SB2026041094
SB20260410101
SB20260410102
and 65 more
#VU124033 - Improper input validation
CVE-2025-61728
CWE-20 Medium
No
No
4.19.19 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 46 more
#VU118221 - Incorrect Default Permissions
CVE-2025-7195
CWE-276 Low
No
No
4.17.5 10.11.2025 SB2025111053
SB2025120350
SB2025120351
and 8 more
#VU114392 - Improper Handling of Unexpected Data Type
CVE-2025-7339
CWE-241 Low
No
No
4.20.14 22.08.2025 SB2025082222
SB2025091525
SB2025091621
and 18 more
#VU114080 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-47907
CWE-362 Low
No
No
4.18, 4.18.25 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 52 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889
CWE-1333 Low
No
No
4.17.5 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 34 more
#VU105983 - Resource exhaustion
CVE-2025-30204
CWE-400 Medium
No
No
4, 4.15.14, 4.17.7, 4.18 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU101027 - Error Handling
CVE-2024-21536
CWE-388 Medium
No
No
4, 4.14.18, 4.15.14, 4.17.7 28.11.2024 SB2024112825
SB2024112826
SB2024120211
and 22 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590
CWE-405 Medium
Available
No
4, 4.14.18, 4.15.14, 4.16.3, 4.17.0, 4.17.7 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU96716 - Incorrect Regular Expression
CVE-2024-39249
CWE-185 Medium
No
No
4, 4.14.18, 4.15.14, 4.17.7 03.09.2024 SB2024090325
SB2024090326
SB2024090359
and 20 more
#VU94329 - NULL Pointer Dereference
CVE-2024-37890
CWE-476 Medium
No
No
4.14.18, 4.15.14, 4.16.0, 4.16.2 15.07.2024 SB2024071508
SB2024071933
SB2024081608
and 32 more
#VU90715 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-29180
CWE-22 Medium
No
No
4.14.18, 4.15.14, 4.16.2 03.06.2024 SB2024060314
SB2024060328
SB2024060410
and 18 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041
CWE-601 Medium
No
No
4, 4.14.11, 4.14.18, 4.15.14, 4.17.7 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU85240 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-11831
CWE-79 Medium
No
No
4, 4.14.18, 4.15.14, 4.17.7 09.01.2024 SB2024010997
SB2025021411
SB2025021412
and 17 more
#VU61669 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0155
CWE-200 Low
No
No
4.17.5 28.03.2022 SB2022032840
SB2022032843
SB2022071505
and 32 more
#VU61668 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0536
CWE-200 Low
No
No
4.11.0, 4.17.5 28.03.2022 SB2022032841
SB2022032843
SB2022042561
and 27 more


Showing elements 21 - 40 out of 476