Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 8

Vendor: Red Hat Inc.
Software: OpenShift Data Foundation (formerly OpenShift Container Storage)
Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 4.16.2 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU94614 - Execution with Unnecessary Privileges
CVE-2024-5042		 CWE-250 Medium
No
No
 4.16.0 19.07.2024 SB2024071920
SB2024071933
#VU92186 - Permissions, Privileges, and Access Controls
CVE-2023-4822		 CWE-264 Low
No
No
 4.16.0 17.06.2024 SB2023101664
SB2024061802
SB2024071933
#VU87830 - Missing release of memory after effective lifetime
CVE-2024-1394		 CWE-401 Medium
No
No
 4.16.0 26.03.2024 SB2024032646
SB2024032647
SB2024032648
and 54 more
#VU87685 - Resource exhaustion
CVE-2024-0450		 CWE-400 Medium
No
No
 4.16.0 21.03.2024 SB2024032107
SB2024032110
SB2024040848
and 80 more
#VU87538 - Resource exhaustion
CVE-2024-28180		 CWE-400 Medium
No
No
 4.16.0 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 4.16.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 4.16.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU87185 - UNIX Symbolic Link (Symlink) Following
CVE-2023-6597		 CWE-61 Low
No
No
 4.16.0 07.03.2024 SB2024030718
SB2024030726
SB2024030727
and 88 more
#VU85624 - Reachable Assertion
CVE-2024-0567		 CWE-617 Medium
No
No
 4.15.0 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 34 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553		 CWE-208 Medium
No
No
 4.15.0 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU85583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-49569		 CWE-22 Medium
No
No
 4.16.0 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 42 more
#VU85582 - Resource exhaustion
CVE-2023-49568		 CWE-400 Medium
No
No
 4.16.0 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 37 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385		 CWE-78 Medium
Available
No
 4.15.0 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU84507 - Resource exhaustion
CVE-2023-47108		 CWE-400 Medium
No
No
 4.16.0 18.12.2023 SB2023121825
SB2023122137
SB2024010436
and 55 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 4.15.0 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU83242 - Resource exhaustion
CVE-2023-43646		 CWE-400 Medium
No
No
 4.16.0 17.11.2023 SB2023111725
SB2024010322
SB2024013046
and 5 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 4.15.0 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU81044 - Out-of-bounds read
CVE-2023-39615		 CWE-125 Medium
No
No
 4.15.0 21.09.2023 SB2023092155
SB2023092202
SB2023092203
and 61 more
#VU77652 - Improper Authentication
CVE-2023-3128		 CWE-287 High
No
No
 4.16.0 22.06.2023 SB2023062281
SB2023071336
SB20230720114
and 15 more


Showing elements 141 - 160 out of 476