Known vulnerabilities in openshift (Red Hat package) - page 11

Vendor: Red Hat Inc.

Software: openshift (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:openshift_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 269

Public exploits: 18

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (269)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU62797 - Improper Locking CVE-2021-20291	CWE-667	Medium	No	No	4.7.0-202104090228.p0.git.97111.77863f8.el7, 4.7.0-202104090228.p0.git.97111.77863f8.el8	04.05.2022	SB2021040182 SB2022050417 SB2022092037 and 13 more
#VU56245 - Improper input validation CVE-2021-25735	CWE-20	Medium	Available	No	4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7, 4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8	01.09.2021	SB2021090125 SB2021090126 SB2022083132 and 4 more
#VU55143 - Integer overflow CVE-2021-33909	CWE-190	Low	Available	No	4.7.0-202107132131.p0.git.558d959.assembly.stream.el7, 4.7.0-202107132131.p0.git.558d959.assembly.stream.el8	21.07.2021	SB2021072106 SB2021072222 SB2021072223 and 63 more
#VU55034 - Uncontrolled Memory Allocation CVE-2021-33910	CWE-789	Low	Available	No	4.7.0-202107132131.p0.git.558d959.assembly.stream.el7, 4.7.0-202107132131.p0.git.558d959.assembly.stream.el8	20.07.2021	SB2021072031 SB2021072032 SB2021072206 and 31 more
#VU53436 - Exposure of sensitive information to an unauthorized actor CVE-2021-25737	CWE-200	Low	No	No	4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7, 4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8	24.05.2021	SB2021052409 SB2021060911 SB2021090126 and 4 more
#VU53399 - Security Features CVE-2021-30465	CWE-254	Low	No	No	4.5.0-202105121820.p0.git.d8ef5ad.el7, 4.5.0-202105121820.p0.git.d8ef5ad.el8, 4.6.0-202105150940.p0.git.9caf8fe.el7, 4.6.0-202105150940.p0.git.9caf8fe.el8, 4.7.0-202105160013.p0.git.df9c838.el7, 4.7.0-202105160013.p0.git.df9c838.el8	20.05.2021	SB2021052013 SB2021052014 SB2021052015 and 33 more
#VU52502 - Improper input validation CVE-2020-27218	CWE-20	Medium	No	No	4.5.0-202106011407.p0.git.d8ef5ad.el7, 4.5.0-202106011407.p0.git.d8ef5ad.el8	23.04.2021	SB2021042305 SB2021042635 SB2021063002 and 15 more
#VU52495 - Permissions, Privileges, and Access Controls CVE-2021-21645	CWE-264	Low	No	No	4.5.0-202106011407.p0.git.d8ef5ad.el7, 4.5.0-202106011407.p0.git.d8ef5ad.el8, 4.6.0-202106110123.p0.git.b00ba52.el7, 4.6.0-202106110123.p0.git.b00ba52.el8	22.04.2021	SB2021042205 SB2021060101 SB2021063033 and 3 more
#VU52494 - Cross-Site Request Forgery (CSRF) CVE-2021-21644	CWE-352	Low	No	No	4.5.0-202106011407.p0.git.d8ef5ad.el7, 4.5.0-202106011407.p0.git.d8ef5ad.el8, 4.6.0-202106110123.p0.git.b00ba52.el7, 4.6.0-202106110123.p0.git.b00ba52.el8	22.04.2021	SB2021042205 SB2021060101 SB2021063033 and 3 more
#VU52493 - Permissions, Privileges, and Access Controls CVE-2021-21643	CWE-264	Low	No	No	4.5.0-202106011407.p0.git.d8ef5ad.el7, 4.5.0-202106011407.p0.git.d8ef5ad.el8, 4.6.0-202106110123.p0.git.b00ba52.el7, 4.6.0-202106110123.p0.git.b00ba52.el8	22.04.2021	SB2021042205 SB2021060101 SB2021063033 and 3 more
#VU52492 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-21642	CWE-611	Medium	No	No	4.5.0-202106011407.p0.git.d8ef5ad.el7, 4.5.0-202106011407.p0.git.d8ef5ad.el8, 4.6.0-202106110123.p0.git.b00ba52.el7, 4.6.0-202106110123.p0.git.b00ba52.el8	22.04.2021	SB2021042205 SB2021060101 SB2021063033 and 3 more
#VU52385 - Improper input validation CVE-2020-27223	CWE-20	Medium	Available	No	4.5.0-202106011407.p0.git.d8ef5ad.el7, 4.5.0-202106011407.p0.git.d8ef5ad.el8	21.04.2021	SB2021042107 SB2021063002 SB2021063034 and 19 more
#VU51878 - Exposure of sensitive information to an unauthorized actor CVE-2021-28163	CWE-200	Medium	No	No	4.7.0-202105111743.p0.git.75370d3.el7, 4.7.0-202105111743.p0.git.75370d3.el8	01.04.2021	SB2021040179 SB2021050704 SB2021051321 and 27 more
#VU51876 - Resource exhaustion CVE-2021-28165	CWE-400	Medium	No	No	4.7.0-202105111743.p0.git.75370d3.el7, 4.7.0-202105111743.p0.git.75370d3.el8	01.04.2021	SB2021040179 SB2021042208 SB2021050704 and 56 more
#VU50047 - Incorrect Calculation CVE-2021-3114	CWE-682	Medium	No	No	4.7.0-202103181538.p0.git.97109.7576cdc.el7, 4.7.0-202103181538.p0.git.97109.7576cdc.el8, 4.7.0-202104250659.p0.git.7d0a2b2.el7, 4.7.0-202104250659.p0.git.7d0a2b2.el8, 4.7.0-202105111743.p0.git.75370d3.el7, 4.7.0-202105111743.p0.git.75370d3.el8, 4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7, 4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8	26.01.2021	SB2021012714 SB2021012715 SB20210120130 and 40 more
#VU48480 - Improper input validation CVE-2020-28362	CWE-20	Medium	No	No	4.7.0-202104250659.p0.git.7d0a2b2.el7, 4.7.0-202104250659.p0.git.7d0a2b2.el8, 4.7.0-202105111743.p0.git.75370d3.el7, 4.7.0-202105111743.p0.git.75370d3.el8	17.11.2020	SB2020111715 SB2020111716 SB2020111225 and 30 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-27216	CWE-362	Low	No	No	4.5.0-202106011407.p0.git.d8ef5ad.el7, 4.5.0-202106011407.p0.git.d8ef5ad.el8	23.10.2020	SB2020121307 SB2020121308 SB2021012011 and 27 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-16845	CWE-835	Medium	No	No	4.4.0-202011130111.p0.git.0.4861dfa.el7, 4.4.0-202011130111.p0.git.0.4861dfa.el8, 4.5.0-202010091010.p0.git.0.3538ccc.el7, 4.5.0-202010091010.p0.git.0.3538ccc.el8, 4.5.0-202011131403.p0.git.0.d153f8f.el7, 4.5.0-202011131403.p0.git.0.d153f8f.el8, 4.5.0-202012040353.p0.git.0.c2c4083.el7, 4.5.0-202012040353.p0.git.0.c2c4083.el8, 4.5.0-202102261511.p0.git.0.f0229b9.el7, 4.5.0-202102261511.p0.git.0.f0229b9.el8, 4.6.0-202103210832.p0.git.94284.834ccc7.el7, 4.6.0-202103210832.p0.git.94284.834ccc7.el8, 4.7.0-202104250659.p0.git.7d0a2b2.el7, 4.7.0-202104250659.p0.git.7d0a2b2.el8	14.08.2020	SB2020081403 SB2020081404 SB2020081405 and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-15586	CWE-362	Medium	No	No	4.4.0-202011130111.p0.git.0.4861dfa.el7, 4.4.0-202011130111.p0.git.0.4861dfa.el8, 4.5.0-202010091010.p0.git.0.3538ccc.el7, 4.5.0-202010091010.p0.git.0.3538ccc.el8, 4.5.0-202011131403.p0.git.0.d153f8f.el7, 4.5.0-202011131403.p0.git.0.d153f8f.el8, 4.5.0-202012040353.p0.git.0.c2c4083.el7, 4.5.0-202012040353.p0.git.0.c2c4083.el8, 4.5.0-202102261511.p0.git.0.f0229b9.el7, 4.5.0-202102261511.p0.git.0.f0229b9.el8, 4.6.0-202103210832.p0.git.94284.834ccc7.el7, 4.6.0-202103210832.p0.git.94284.834ccc7.el8, 4.7.0-202104250659.p0.git.7d0a2b2.el7, 4.7.0-202104250659.p0.git.7d0a2b2.el8	27.07.2020	SB2020072734 SB2020072735 SB2020072749 and 37 more
#VU27924 - Incorrect Default Permissions CVE-2020-1945	CWE-276	Low	No	No	4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8	15.05.2020	SB2020051501 SB2020052114 SB2020060205 and 48 more

Showing elements 201 - 220 out of 269

Known vulnerabilities in openshift (Red Hat package) - page 11

Breakdown by Severity Chart

Vulnerabilities (269)

Please verify you're human