Known vulnerabilities in OpenShift Logging
Vendor:
Red Hat Inc.
Software:
OpenShift Logging
Software CPE:
cpe:2.3:a:red_hat:openshift_logging:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
810
Public exploits:
50
Known exploited (KEV):
10
Breakdown by Severity Chart
6.4.7
6.5.3
6.0.16
6.2.12
6.4.6
6.0.15
6.4.5
6.5.1
6.2.10
6.0.14
6.3.4
6.4.3
6.2.9
6.0.11
6.0.10
6.0.9
6.0.8
6.0.5
6.0.4
6.0.3
6.0.2
6.0.0
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.0.12
6.2.7
6.3.1
5.9.14
5.8.20
6.1.5
6.0.7
5.9.13
5.8.19
6.1.4
6.0.6
5.8.18
5.9.12
5.8.17
5.9.11
5.6.27
5.9.10
5.8.16
5.8.14
6.0.1
5.6.25
5.9.8
5.6.24
5.9.7
5.8.13
5.9.5
5.8.9
5.6.21
5.6.18
5.8.6
5.7.13
5.9.1
5.8.3
5.6.16
5.6.15
5.6.14
5.6.13
5.7.11
5.8.2
5.7.10
5.7.9
5.7.8
5.8.1
5.8.0
5.5.17
5.7.7
5.6.12
5.6.11
5.6.10
5.6.9
5.6.8
5.6.7
5.6.6
5.5.16
5.5.15
5.5.14
5.5.13
5.5.12
5.5.11
5.5.10
5.7.6
5.7.5
5.7.4
5.7.3
5.7.2
5.7.1
5.7.0
5.6.5
5.6.4
5.5.9
5.6.3
5.6.2
5.4.12
5.5.8
5.5.7
5.5.6
5.4.11
5.4.10
5.4.9
5.6.1
5.6.0
5.5.5
5.3.14
5.4.8
5.4.7
5.4.6
5.5.4
5.5.3
5.5.2
5.3.13
5.3.12
5.5.1
5.3.11
5.4.5
5.4.4
5.5.0
5.2.13
5.2.12
5.2.11
5.3.10
5.3.9
5.3.8
5.4.3
5.4.2
5.2.10
5.2.9
5.3.7
5.3.6
5.3.5
5.3.4
5.4.1
5.4.0
5.2.8
5.2.7
5.1.9
5.1.8
5.1.7
5.3.3
5.2.6
5.0.12
5.3.2
5.3.1
5.3.0
5.2.5
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.1.0
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
Vulnerabilities (810)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-32282 |
CWE-367 | Low | 6.0.15 | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 51 more |
||
| #VU140605 - Improper Certificate Validation CVE-2026-33810 |
CWE-295 | Medium | 6.0.15 | 31.07.2026 |
SB2026073125 SB2026073183 SB2026073184 and 13 more |
||
| #VU140600 - Improper input validation CVE-2026-32281 |
CWE-20 | Medium | 6.0.15 | 31.07.2026 |
SB2026073125 SB2026073183 SB2026073184 and 38 more |
||
| #VU140599 - Resource exhaustion CVE-2026-32280 |
CWE-400 | Medium | 6.0.15 | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 75 more |
||
| #VU125945 - Improper input validation CVE-2026-34986 |
CWE-20 | Medium | 6.0.15 | 14.04.2026 |
SB2026041463 SB2026041464 SB2026041465 and 74 more |
||
| #VU124115 - Improper Authorization CVE-2026-27137 |
CWE-285 | Medium | 6.0.15 | 19.03.2026 |
SB2026031903 SB2026031905 SB2026032422 and 10 more |
||
| #VU124118 - Improper input validation CVE-2026-25679 |
CWE-20 | Medium | 6.0.15 | 19.03.2026 |
SB2026031903 SB2026031904 SB2026031905 and 136 more |
||
| #VU112026 - Asymmetric Resource Consumption (Amplification) CVE-2025-25186 |
CWE-405 | Medium | 5.9.13 | 27.06.2025 |
SB2025062740 SB2025062741 SB2025062742 and 7 more |
||
| #VU105983 - Resource exhaustion CVE-2025-30204 |
CWE-400 | Medium | 5.9.13, 6.0.7, 6.0.12, 6.1.5, 6.2.7 | 24.03.2025 |
SB2025032475 SB2025032730 SB2025040333 and 97 more |
||
| #VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-27610 |
CWE-22 | Medium | 5.8.19, 5.9.13 | 17.03.2025 |
SB2025031756 SB20250317118 SB20250317119 and 15 more |
||
| #VU105723 - Stack-based buffer overflow CVE-2024-8176 |
CWE-121 | High | 5.8.20, 5.9.13 | 14.03.2025 |
SB2025031426 SB2025031429 SB2025031430 and 105 more |
||
| #VU105461 - Resource exhaustion CVE-2025-22868 |
CWE-400 | Medium | 6.0.12, 6.2.7 | 10.03.2025 |
SB2025031013 SB2025031015 SB2025031076 and 89 more |
||
| #VU105450 - Resource exhaustion CVE-2025-27144 |
CWE-400 | Medium | 5.9.13, 6.0.6, 6.1.4 | 07.03.2025 |
SB2025030735 SB2025030736 SB2025030737 and 80 more |
||
| #VU104099 - Use After Free CVE-2024-56171 |
CWE-416 | High | 5.8.19, 5.9.13, 6.0.6, 6.1.4, 6.1.5 | 20.02.2025 |
SB2025022003 SB2025022010 SB2025022023 and 111 more |
||
| #VU104098 - Stack-based buffer overflow CVE-2025-24928 |
CWE-121 | High | 5.8.19, 5.9.13, 6.0.6, 6.1.4, 6.1.5 | 20.02.2025 |
SB2025022003 SB2025022010 SB2025022023 and 111 more |
||
| #VU101868 - Resource exhaustion CVE-2024-45338 |
CWE-400 | Medium | 5.8.20, 5.9.14, 6.0.6, 6.1.4 | 19.12.2024 |
SB2024121932 SB2024123101 SB2025010619 and 137 more |
||
| #VU88211 - Resource exhaustion CVE-2024-2511 |
CWE-400 | Medium | 5.8.16, 5.8.17, 5.8.19, 5.8.20, 5.9.10, 5.9.14 | 08.04.2024 |
SB2024040853 SB2024042960 SB2024051069 and 91 more |
||
| #VU87339 - Information Exposure Through Timing Discrepancy CVE-2024-2236 |
CWE-208 | Medium | 5.8.16, 5.8.17, 5.8.19, 5.8.20, 5.9.10, 5.9.14, 6.1.5 | 11.03.2024 |
SB2024031137 SB2024031141 SB2024111242 and 59 more |
||
| #VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11023 |
CWE-79 | Low | 5.8.18, 5.8.19, 5.8.20, 5.9.12, 5.9.14 | 05.05.2020 |
SB2020042126 SB2020052033 SB2020052103 and 180 more |
||
| #VU19178 - Out-of-bounds write CVE-2019-12900 |
CWE-787 | High | 5.6.27, 5.8.17, 5.8.19, 5.8.20, 5.9.11, 5.9.14 | 15.07.2019 |
SB2019071503 SB2019072101 SB2019080907 and 85 more |
Showing elements 1 - 20 out of 810