Known vulnerabilities in openshift (Red Hat package) - page 12

Vendor: Red Hat Inc.
Software: openshift (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:openshift_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 269
Public exploits: 18
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift (Red Hat package) openshift (Red Hat package) is affected by 269 known vulnerabilities: 22 high, 164 medium, 83 low Critical High Medium Low

Vulnerabilities (269)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50020 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21615		 CWE-367 Medium
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 26.01.2021 SB2021012623
SB2021021723
SB2021022601
and 1 more
#VU49525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21611		 CWE-79 Low
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 14.01.2021 SB2021011418
SB2021011453
SB2021012106
and 2 more
#VU49524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21610		 CWE-79 Low
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 14.01.2021 SB2021011418
SB2021011452
SB2021012106
and 2 more
#VU49523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21608		 CWE-79 Low
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 14.01.2021 SB2021011418
SB2021011450
SB2021012106
and 2 more
#VU49522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21603		 CWE-79 Low
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 13.01.2021 SB2021011418
SB2021011445
SB2021012106
and 2 more
#VU49526 - XML Injection
CVE-2021-21604		 CWE-91 Medium
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 13.01.2021 SB2021011418
SB2021011446
SB2021012106
and 2 more
#VU49527 - Exposure of sensitive information to an unauthorized actor
CVE-2021-21602		 CWE-200 Medium
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 13.01.2021 SB2021011418
SB2021011444
SB2021012106
and 2 more
#VU49528 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21605		 CWE-22 Medium
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 13.01.2021 SB2021011418
SB2021011447
SB2021012106
and 2 more
#VU49529 - Permissions, Privileges, and Access Controls
CVE-2021-21606		 CWE-264 Low
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 13.01.2021 SB2021011418
SB2021011448
SB2021012106
and 2 more
#VU49530 - Memory corruption
CVE-2021-21607		 CWE-119 Medium
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 13.01.2021 SB2021011418
SB2021011449
SB2021012106
and 2 more
#VU49531 - Permissions, Privileges, and Access Controls
CVE-2021-21609		 CWE-264 Low
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 13.01.2021 SB2021011418
SB2021011451
SB2021012106
and 2 more
#VU48976 - Information Exposure Through Log Files
CVE-2020-8563		 CWE-532 Low
No
No
 4.6.0-202012051246.p0.git.94231.efc9027.el7, 4.6.0-202012051246.p0.git.94231.efc9027.el8 07.12.2020 SB2020121507
SB2020121508
SB2020121509
#VU48977 - Information Exposure Through Log Files
CVE-2020-8564		 CWE-532 Low
No
No
 4.6.0-202101160934.p0.git.94242.fc5242e.el7, 4.6.0-202101160934.p0.git.94242.fc5242e.el8 07.12.2020 SB2020121507
SB2020121509
SB2020121808
and 6 more
#VU48231 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-2304		 CWE-611 Medium
No
No
 4.4.0-202101221150.p0.git.0.f7ab6b8.el7, 4.4.0-202101221150.p0.git.0.f7ab6b8.el8 04.11.2020 SB2020110942
SB2021020406
#VU48232 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-2305		 CWE-611 Medium
No
No
 4.4.0-202101221150.p0.git.0.f7ab6b8.el7, 4.4.0-202101221150.p0.git.0.f7ab6b8.el8 04.11.2020 SB2020110943
SB2021020406
#VU34130 - Permissions, Privileges, and Access Controls
CVE-2020-8559		 CWE-264 Medium
Available
No
 4.4.0-202012052258.p0.git.0.0fd57a4.el7, 4.4.0-202012052258.p0.git.0.0fd57a4.el8 22.07.2020 SB2020072221
SB2020120203
SB2020121809
and 6 more
#VU30128 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2222		 CWE-79 Low
No
No
 4.3.37-202009120213.p0.git.0.dffefe4.el8, 4.5.0-202008130146.p0.git.0.aaf1d57.el7, 4.5.0-202008130146.p0.git.0.aaf1d57.el8 16.07.2020 SB20200716112
SB2020082409
SB2020071910
and 2 more
#VU30127 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2221		 CWE-79 Low
No
No
 4.3.37-202009120213.p0.git.0.dffefe4.el8, 4.5.0-202008130146.p0.git.0.aaf1d57.el7, 4.5.0-202008130146.p0.git.0.aaf1d57.el8 16.07.2020 SB20200716112
SB2020082409
SB2020071909
and 2 more
#VU30126 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2220		 CWE-79 Low
No
No
 4.3.37-202009120213.p0.git.0.dffefe4.el8, 4.5.0-202008130146.p0.git.0.aaf1d57.el7, 4.5.0-202008130146.p0.git.0.aaf1d57.el8 16.07.2020 SB20200716112
SB2020082409
SB2020071908
and 2 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 4.5.0-202102050524.p0.git.0.9229406.el7, 4.5.0-202102050524.p0.git.0.9229406.el8, 4.6.0-202102050212.p0.git.94265.716fcf8.el7, 4.6.0-202102050212.p0.git.94265.716fcf8.el8 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more


Showing elements 221 - 240 out of 269