Known vulnerabilities in OpenShift Logging

Software CPE: cpe:2.3:a:red_hat:openshift_logging:*:*:*:*:*:*:*:*
Total vulnerabilities: 810
Public exploits: 50
Known exploited (KEV): 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Logging OpenShift Logging is affected by 810 known vulnerabilities: 2 critical, 100 high, 218 medium, 490 low Critical High Medium Low

Vulnerabilities (810)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282
CWE-367 Low
No
No
6.0.15 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 51 more
#VU140605 - Improper Certificate Validation
CVE-2026-33810
CWE-295 Medium
No
No
6.0.15 31.07.2026 SB2026073125
SB2026073183
SB2026073184
and 13 more
#VU140600 - Improper input validation
CVE-2026-32281
CWE-20 Medium
No
No
6.0.15 31.07.2026 SB2026073125
SB2026073183
SB2026073184
and 38 more
#VU140599 - Resource exhaustion
CVE-2026-32280
CWE-400 Medium
No
No
6.0.15 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 75 more
#VU125945 - Improper input validation
CVE-2026-34986
CWE-20 Medium
No
No
6.0.15 14.04.2026 SB2026041463
SB2026041464
SB2026041465
and 74 more
#VU124115 - Improper Authorization
CVE-2026-27137
CWE-285 Medium
No
No
6.0.15 19.03.2026 SB2026031903
SB2026031905
SB2026032422
and 10 more
#VU124118 - Improper input validation
CVE-2026-25679
CWE-20 Medium
No
No
6.0.15 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 136 more
#VU112026 - Asymmetric Resource Consumption (Amplification)
CVE-2025-25186
CWE-405 Medium
No
No
5.9.13 27.06.2025 SB2025062740
SB2025062741
SB2025062742
and 7 more
#VU105983 - Resource exhaustion
CVE-2025-30204
CWE-400 Medium
No
No
5.9.13, 6.0.7, 6.0.12, 6.1.5, 6.2.7 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27610
CWE-22 Medium
No
No
5.8.19, 5.9.13 17.03.2025 SB2025031756
SB20250317118
SB20250317119
and 15 more
#VU105723 - Stack-based buffer overflow
CVE-2024-8176
CWE-121 High
No
No
5.8.20, 5.9.13 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU105461 - Resource exhaustion
CVE-2025-22868
CWE-400 Medium
No
No
6.0.12, 6.2.7 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU105450 - Resource exhaustion
CVE-2025-27144
CWE-400 Medium
No
No
5.9.13, 6.0.6, 6.1.4 07.03.2025 SB2025030735
SB2025030736
SB2025030737
and 80 more
#VU104099 - Use After Free
CVE-2024-56171
CWE-416 High
No
No
5.8.19, 5.9.13, 6.0.6, 6.1.4, 6.1.5 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928
CWE-121 High
No
No
5.8.19, 5.9.13, 6.0.6, 6.1.4, 6.1.5 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU101868 - Resource exhaustion
CVE-2024-45338
CWE-400 Medium
No
No
5.8.20, 5.9.14, 6.0.6, 6.1.4 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU88211 - Resource exhaustion
CVE-2024-2511
CWE-400 Medium
No
No
5.8.16, 5.8.17, 5.8.19, 5.8.20, 5.9.10, 5.9.14 08.04.2024 SB2024040853
SB2024042960
SB2024051069
and 91 more
#VU87339 - Information Exposure Through Timing Discrepancy
CVE-2024-2236
CWE-208 Medium
No
No
5.8.16, 5.8.17, 5.8.19, 5.8.20, 5.9.10, 5.9.14, 6.1.5 11.03.2024 SB2024031137
SB2024031141
SB2024111242
and 59 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
5.8.18, 5.8.19, 5.8.20, 5.9.12, 5.9.14 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU19178 - Out-of-bounds write
CVE-2019-12900
CWE-787 High
No
No
5.6.27, 5.8.17, 5.8.19, 5.8.20, 5.9.11, 5.9.14 15.07.2019 SB2019071503
SB2019072101
SB2019080907
and 85 more


Showing elements 1 - 20 out of 810