Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 9

Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85764 - Improper Authentication
CVE-2023-42465
CWE-287 Low
No
No
4.15.0 24.01.2024 SB2024012432
SB2024012434
SB2024012435
and 32 more
#VU84985 - Out-of-bounds read
CVE-2023-7104
CWE-125 Medium
No
No
4.15.0 04.01.2024 SB2024010417
SB2024010420
SB2024010516
and 108 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981
CWE-208 Medium
No
No
4.15.0 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU82980 - Improper input validation
CVE-2023-27043
CWE-20 Medium
No
No
4.15.0 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU82349 - Cryptographic Issues
CVE-2023-5363
CWE-310 Low
No
No
4.15.0 24.10.2023 SB2023102443
SB2023102448
SB2023102534
and 46 more
#VU82112 - Improper Authorization
CVE-2023-43040
CWE-285 Medium
Available
No
4.14.0 17.10.2023 SB2023101761
SB2023112450
SB2024012922
and 5 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804
CWE-200 Low
Available
No
4.15.0 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU80801 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4641
CWE-200 Low
No
No
4.12.10 14.09.2023 SB2023091453
SB2023091455
SB2023101019
and 66 more
#VU79523 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35939
CWE-59 Low
No
No
4.15.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937
CWE-367 Low
No
No
4.15.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79521 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35938
CWE-59 Low
No
No
4.15.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409
CWE-295 Medium
No
No
4.15.0 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406
CWE-644 Medium
No
No
4.15.0 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28487
CWE-78 Low
No
No
4.15.0 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 28 more
#VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28486
CWE-78 Low
No
No
4.15.0 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 31 more
#VU71458 - Memory corruption
CVE-2023-22745
CWE-119 High
No
No
4.12.10 24.01.2023 SB2023012404
SB2023022749
SB2023030333
and 42 more
#VU68281 - Incorrect Regular Expression
CVE-2021-3765
CWE-185 Medium
No
No
4.12.10, 4.13.0 12.10.2022 SB2021110231
SB2022101269
SB2022101801
and 8 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4559
CWE-22 High
Available
No
4.12.10 22.09.2022 SB2007082801
SB2022120206
SB2023060825
and 68 more
#VU27882 - Out-of-bounds write
CVE-2020-12762
CWE-787 High
No
No
4.12.10 13.05.2020 SB2020051323
SB2020052812
SB2020061526
and 54 more
#VU16542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20677
CWE-79 Low
No
No
4.14.0 14.12.2018 SB2018121404
SB2019101009
SB2020093090
and 18 more


Showing elements 161 - 180 out of 476