Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 6

Vendor: Red Hat Inc.
Software: OpenShift Data Foundation (formerly OpenShift Container Storage)
Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 4.14.13, 4.15.9, 4.16.4, 4.17.1 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU97217 - Resource exhaustion
CVE-2024-34158		 CWE-400 Medium
No
No
 4.14.13, 4.15.9, 4.16.4, 4.17.1 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU96745 - Incorrect Regular Expression
CVE-2024-6232		 CWE-185 Medium
No
No
 4.16.4, 4.17.1 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU93850 - Resource exhaustion
CVE-2024-24791		 CWE-400 Medium
No
No
 4.16.5 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 4.16.0, 4.17.0 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU64820 - Information Exposure Through Log Files
CVE-2020-8565		 CWE-532 Low
No
No
 4.9.0 30.06.2022 SB2023053114
SB2023103043
SB2024020523
and 10 more
#VU64805 - Improper input validation
CVE-2021-43565		 CWE-20 Medium
No
No
 4.10.0 29.06.2022 SB2021120347
SB2022062928
SB2022072127
and 39 more
#VU59042 - Resource exhaustion
CVE-2021-44717		 CWE-400 Medium
No
No
 4.10.0 16.12.2021 SB2021121610
SB2021121646
SB2022031628
and 32 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 4.10.0 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU58206 - Absolute Path Traversal
CVE-2021-32803		 CWE-36 Medium
No
No
 4.9.0 17.11.2021 SB2021080329
SB2022031104
SB2022060618
and 26 more
#VU58205 - Absolute Path Traversal
CVE-2021-32804		 CWE-36 Medium
No
No
 4.9.0 17.11.2021 SB2021080328
SB2022031104
SB2022060618
and 27 more
#VU58203 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-37712		 CWE-22 Medium
No
No
 4.9.0 17.11.2021 SB2021111707
SB2021111710
SB2022031104
and 24 more
#VU58202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-37701		 CWE-22 Medium
No
No
 4.9.0 17.11.2021 SB2021111706
SB2021111710
SB2022031104
and 24 more
#VU56829 - Improper input validation
CVE-2021-29923		 CWE-20 Medium
No
No
 4.10.0 22.09.2021 SB2021092225
SB2021092226
SB2021100408
and 37 more
#VU56024 - Resource Management Errors
CVE-2021-33198		 CWE-399 Medium
No
No
 4.9.0 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 46 more
#VU56023 - Missing Authorization
CVE-2021-33197		 CWE-862 Medium
No
No
 4.9.0 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 41 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195		 CWE-79 Medium
No
No
 4.9.0 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-36221		 CWE-362 Medium
No
No
 4.10.0 10.08.2021 SB2021081001
SB2021081217
SB2021081219
and 32 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558		 CWE-295 Medium
Available
No
 4.9.0, 4.10.0 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU23636 - Unprotected Storage of Credentials
CVE-2019-11250		 CWE-256 Low
No
No
 4.9.0 17.12.2019 SB2019082909
SB2019121707
SB2019121704
and 15 more


Showing elements 101 - 120 out of 476