Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 8

Vendor: Red Hat Inc.
Software: OpenShift Data Foundation (formerly OpenShift Container Storage)
Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85764 - Improper Authentication
CVE-2023-42465		 CWE-287 Low
No
No
 4.15.0 24.01.2024 SB2024012432
SB2024012434
SB2024012435
and 32 more
#VU84985 - Out-of-bounds read
CVE-2023-7104		 CWE-125 Medium
No
No
 4.15.0 04.01.2024 SB2024010417
SB2024010420
SB2024010516
and 108 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385		 CWE-78 Medium
Available
No
 4.15.0 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 4, 4.14.18, 4.15.0, 4.15.14 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 4.15.0 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981		 CWE-208 Medium
No
No
 4.15.0 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 4.15.0 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 4.15.0 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU82349 - Cryptographic Issues
CVE-2023-5363		 CWE-310 Low
No
No
 4.15.0 24.10.2023 SB2023102443
SB2023102448
SB2023102534
and 46 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 4.15.0 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU79523 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35939		 CWE-59 Low
No
No
 4.15.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937		 CWE-367 Low
No
No
 4.15.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79521 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35938		 CWE-59 Low
No
No
 4.15.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 4.15.0 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 4.15.0 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28487		 CWE-78 Low
No
No
 4.15.0 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 28 more
#VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28486		 CWE-78 Low
No
No
 4.15.0 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 31 more
#VU68281 - Incorrect Regular Expression
CVE-2021-3765		 CWE-185 Medium
No
No
 4.12.10, 4.13.0 12.10.2022 SB2021110231
SB2022101269
SB2022101801
and 8 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4559		 CWE-22 High
Available
No
 4.12.10 22.09.2022 SB2007082801
SB2022120206
SB2023060825
and 68 more
#VU27882 - Out-of-bounds write
CVE-2020-12762		 CWE-787 High
No
No
 4.12.10 13.05.2020 SB2020051323
SB2020052812
SB2020061526
and 54 more


Showing elements 141 - 160 out of 476