Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 7

Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94614 - Execution with Unnecessary Privileges
CVE-2024-5042
CWE-250 Medium
No
No
4.16.0 19.07.2024 SB2024071920
SB2024071933
#VU94329 - NULL Pointer Dereference
CVE-2024-37890
CWE-476 Medium
No
No
4.14.18, 4.15.14, 4.16.0, 4.16.2 15.07.2024 SB2024071508
SB2024071933
SB2024081608
and 32 more
#VU92186 - Permissions, Privileges, and Access Controls
CVE-2023-4822
CWE-264 Low
No
No
4.16.0 17.06.2024 SB2023101664
SB2024061802
SB2024071933
#VU87830 - Missing release of memory after effective lifetime
CVE-2024-1394
CWE-401 Medium
No
No
4.16.0 26.03.2024 SB2024032646
SB2024032647
SB2024032648
and 54 more
#VU87734 - Resource exhaustion
CVE-2024-28863
CWE-400 Medium
No
No
4.16.0, 4.16.2 22.03.2024 SB2024032234
SB2024052306
SB2024061114
and 30 more
#VU87685 - Resource exhaustion
CVE-2024-0450
CWE-400 Medium
No
No
4.16.0 21.03.2024 SB2024032107
SB2024032110
SB2024040848
and 80 more
#VU87538 - Resource exhaustion
CVE-2024-28180
CWE-400 Medium
No
No
4.16.0 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU87329 - Resource exhaustion
CVE-2024-28176
CWE-400 Medium
No
No
4.16.0, 4.16.2, 4.17.0 11.03.2024 SB2024031123
SB2024031446
SB2024031447
and 37 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786
CWE-835 Medium
No
No
4.16.0, 4.17.0 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785
CWE-79 Low
No
No
4.16.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87196 - Error Handling
CVE-2024-24783
CWE-388 Medium
No
No
4.16.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU87185 - UNIX Symbolic Link (Symlink) Following
CVE-2023-6597
CWE-61 Low
No
No
4.16.0 07.03.2024 SB2024030718
SB2024030726
SB2024030727
and 88 more
#VU85624 - Reachable Assertion
CVE-2024-0567
CWE-617 Medium
No
No
4.15.0 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 34 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553
CWE-208 Medium
No
No
4.15.0 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU85583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-49569
CWE-22 Medium
No
No
4.16.0 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 42 more
#VU85582 - Resource exhaustion
CVE-2023-49568
CWE-400 Medium
No
No
4.16.0 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 37 more
#VU84507 - Resource exhaustion
CVE-2023-47108
CWE-400 Medium
No
No
4.16.0 18.12.2023 SB2023121825
SB2023122137
SB2024010436
and 55 more
#VU83242 - Resource exhaustion
CVE-2023-43646
CWE-400 Medium
No
No
4.16.0 17.11.2023 SB2023111725
SB2024010322
SB2024013046
and 5 more
#VU81044 - Out-of-bounds read
CVE-2023-39615
CWE-125 Medium
No
No
4.15.0 21.09.2023 SB2023092155
SB2023092202
SB2023092203
and 61 more
#VU77652 - Improper Authentication
CVE-2023-3128
CWE-287 High
No
No
4.16.0 22.06.2023 SB2023062281
SB2023071336
SB20230720114
and 15 more


Showing elements 121 - 140 out of 476