Known vulnerabilities in OpenShift Developer Tools and Services

Vendor: Red Hat Inc.
Software: OpenShift Developer Tools and Services
Software CPE: cpe:2.3:a:red_hat:openshift_developer_tools_and_services:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 94
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Developer Tools and Services OpenShift Developer Tools and Services is affected by 94 known vulnerabilities: 27 high, 40 medium, 27 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119837 - Improper Resource Shutdown or Release
CVE-2025-67635		 CWE-404 Medium
No
No
 - 11.12.2025 SB2025121131
SB2025121805
SB2025121806
and 10 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 - 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU114059 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-4949		 CWE-611 High
No
No
 - 14.08.2025 SB2025081408
SB2025081409
SB2025081410
and 21 more
#VU112106 - Memory corruption
CVE-2025-52999		 CWE-119 Medium
No
No
 - 02.07.2025 SB2025070257
SB2025070261
SB2025070262
and 43 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU108836 - Resource exhaustion
CVE-2025-1948		 CWE-400 Medium
No
No
 - 09.05.2025 SB2025050924
SB2025051562
SB2025063009
and 18 more
#VU106926 - Resource Management Errors
CVE-2024-57699		 CWE-399 Medium
No
No
 - 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 63 more
#VU105881 - Security Features
CVE-2025-22228		 CWE-254 Low
No
No
 - 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 24 more
#VU98523 - Improper Certificate Validation
CVE-2021-44549		 CWE-295 Medium
No
No
 - 14.10.2024 SB2021122129
SB2024101593
SB2024101594
and 5 more
#VU98065 - Improper Access Control
CVE-2024-47804		 CWE-284 Low
No
No
 - 07.10.2024 SB2024100723
SB2024110549
SB2024110550
and 7 more
#VU98063 - Exposure of sensitive information to an unauthorized actor
CVE-2024-47803		 CWE-200 Low
No
No
 - 07.10.2024 SB2024100723
SB2024110549
SB2024110550
and 2 more
#VU96019 - Resource exhaustion
CVE-2024-38808		 CWE-400 Medium
No
No
 - 14.08.2024 SB2024081480
SB2024092018
SB2024100315
and 24 more
#VU89154 - Security Features
CVE-2024-34145		 CWE-254 Medium
No
No
 - 06.05.2024 SB2024050613
SB20240611153
SB20240611154
and 1 more
#VU89153 - Security Features
CVE-2024-34144		 CWE-254 Medium
No
No
 - 06.05.2024 SB2024050613
SB20240611153
SB20240611154
and 2 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 - 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28149		 CWE-79 Low
No
No
 - 08.03.2024 SB2024030813
SB20240611153
SB20240611154
and 1 more
#VU86808 - Resource exhaustion
CVE-2024-22201		 CWE-400 Medium
No
No
 - 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU85792 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-23900		 CWE-22 Medium
No
No
 - 25.01.2024 SB2024012515
SB20240611153
SB20240611154
and 1 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 - 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 - 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more


Showing elements 1 - 20 out of 94