Known vulnerabilities in OpenShift Pipelines

Vendor: Red Hat Inc.
Software: OpenShift Pipelines
Software CPE: cpe:2.3:a:red_hat:openshift_pipelines:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 36
Public exploits: 5
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Pipelines OpenShift Pipelines is affected by 36 known vulnerabilities: 8 high, 22 medium, 6 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119999 - Resource exhaustion
CVE-2025-66506		 CWE-400 Medium
No
No
 0.21.0 16.12.2025 SB2025121628
SB2025121640
SB2025121641
and 7 more
#VU119401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-64756		 CWE-78 Medium
No
No
 1.19.4 09.12.2025 SB2025120922
SB2025120932
SB20251210178
and 18 more
#VU116130 - Improper input validation
CVE-2025-9288		 CWE-20 Medium
No
No
 1.19.4 26.09.2025 SB2025092616
SB2025092618
SB2025092620
and 17 more
#VU115762 - Improper input validation
CVE-2025-9287		 CWE-20 Medium
No
No
 1.19.4 18.09.2025 SB2025091827
SB2025091828
SB2025091830
and 12 more
#VU111944 - Improper input validation
CVE-2025-6545		 CWE-20 Medium
No
No
 1.19.4 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 11 more
#VU111943 - Improper input validation
CVE-2025-6547		 CWE-20 Medium
No
No
 1.19.4 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 10 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 1.10.6, 1.11.2, 1.12.1 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 1.10.6, 1.11.2 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU78490 - Permissions, Privileges, and Access Controls
CVE-2023-34969		 CWE-264 Low
No
No
 1.10.6, 1.11.2 21.07.2023 SB2023072119
SB2023072121
SB2023072122
and 61 more
#VU78454 - Untrusted Search Path
CVE-2023-38408		 CWE-426 Medium
Available
No
 1.10.6 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 74 more
#VU77812 - Missing release of memory after effective lifetime
CVE-2023-33460		 CWE-401 Medium
No
No
 1.10.6 29.06.2023 SB2023062940
SB2023081424
SB2023082180
and 19 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 1.10.6, 1.11.2 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321		 CWE-295 Medium
No
No
 1.10.6, 1.11.2 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU75606 - Improper Certificate Validation
CVE-2023-31486		 CWE-295 Medium
No
No
 1.10.6 01.05.2023 SB2023050118
SB2023070339
SB2023101769
and 46 more
#VU75432 - Permissions, Privileges, and Access Controls
CVE-2023-30630		 CWE-264 Low
No
No
 1.10.6, 1.11.2, 1.12.1 24.04.2023 SB2023042410
SB2023042412
SB2023042642
and 51 more
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 1.10.6, 1.11.2, 1.12.1 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 1.10.6, 1.11.2 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469		 CWE-399 Medium
No
No
 1.10.6, 1.11.2 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU73829 - State Issues
CVE-2023-27536		 CWE-371 Medium
No
No
 1.10.6, 1.11.2 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU71458 - Memory corruption
CVE-2023-22745		 CWE-119 High
No
No
 1.10.6 24.01.2023 SB2023012404
SB2023022749
SB2023030333
and 42 more


Showing elements 1 - 20 out of 36