Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 9

Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82112 - Improper Authorization
CVE-2023-43040
CWE-285 Medium
Available
No
4.14.0 17.10.2023 SB2023101761
SB2023112450
SB2024012922
and 5 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
4.14.0 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545
CWE-122 High
Available
No
4.14.0 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
4.14.0 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
4.14.0 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81453 - Use After Free
CVE-2023-4813
CWE-416 Medium
No
No
4.14.0 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806
CWE-416 Medium
No
No
4.14.0 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81437 - Memory corruption
CVE-2023-4911
CWE-119 Low
Available
Exploited
4.14.0 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU81426 - Resource exhaustion
CVE-2023-37788
CWE-400 Medium
No
No
4.14.0 03.10.2023 SB2023100334
SB2023100335
SB2023100512
and 11 more
#VU81266 - Improper Privilege Management
CVE-2023-5077
CWE-269 Low
No
No
4.14.0 29.09.2023 SB2023092910
SB2023112450
SB2024101407
#VU81097 - Out-of-bounds read
CVE-2023-4527
CWE-125 Medium
No
No
4.14.0 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU80931 - Resource exhaustion
CVE-2023-3341
CWE-400 Medium
No
No
4.14.0 20.09.2023 SB2023092048
SB2023092050
SB2023092148
and 90 more
#VU80801 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4641
CWE-200 Low
No
No
4.12.10 14.09.2023 SB2023091453
SB2023091455
SB2023101019
and 66 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217
CWE-319 Medium
No
No
4.14.0 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU77145 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2121
CWE-79 Low
No
No
4.14.0 12.06.2023 SB2023061203
SB2023112450
SB2025040717
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400
CWE-79 Medium
No
No
4.14.0 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU71458 - Memory corruption
CVE-2023-22745
CWE-119 High
No
No
4.12.10 24.01.2023 SB2023012404
SB2023022749
SB2023030333
and 42 more
#VU16956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20676
CWE-79 Low
No
No
4.14.0 13.01.2019 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU16542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20677
CWE-79 Low
No
No
4.14.0 14.12.2018 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU13903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14041
CWE-79 Low
No
No
4.14.0 18.07.2018 SB2018071803
SB2019031501
SB2023013124
and 8 more


Showing elements 161 - 180 out of 476