Known vulnerabilities in openshift (Red Hat package) - page 13

Vendor: Red Hat Inc.

Software: openshift (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:openshift_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 269

Public exploits: 18

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (269)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU103955 - Unprotected Alternate Channel CVE-2020-8558	CWE-420	Medium	No	No	4.3.31-202007280738.p0.git.0.9884401.el7, 4.3.31-202007280738.p0.git.0.9884401.el8, 4.4.0-202007090832.p0.git.0.bc32fb1.el7, 4.4.0-202007090832.p0.git.0.bc32fb1.el8, 4.5.0-202007012112.p0.git.0.582d7fc.el7, 4.5.0-202007012112.p0.git.0.582d7fc.el8	13.02.2025	SB2025021315 SB2025021320 SB2020071327 and 2 more
#VU34052 - Resource exhaustion CVE-2020-8557	CWE-400	Low	No	No	4.3.37-202009120213.p0.git.0.dffefe4.el8, 4.4.0-202008250319.p0.git.0.d653415.el7, 4.4.0-202008250319.p0.git.0.d653415.el8, 4.5.0-202008130146.p0.git.0.aaf1d57.el7, 4.5.0-202008130146.p0.git.0.aaf1d57.el8	23.07.2020	SB2020072349 SB2020082409 SB2021110213 and 2 more
#VU30129 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2223	CWE-79	Low	No	No	4.3.37-202009120213.p0.git.0.dffefe4.el8, 4.5.0-202008130146.p0.git.0.aaf1d57.el7, 4.5.0-202008130146.p0.git.0.aaf1d57.el8	16.07.2020	SB20200716112 SB2020082409 SB2020071911 and 2 more
#VU30267 - Server-Side Request Forgery (SSRF) CVE-2020-8555	CWE-918	Medium	No	No	4.2.36-202006211650.p0.git.0.1fe246f.el7, 4.2.36-202006211650.p0.git.0.1fe246f.el8, 4.3.25-202006060952.git.1.96c30f6.el7, 4.3.25-202006060952.git.1.96c30f6.el8, 4.4.0-202006061254.git.1.dc84fb4.el7, 4.4.0-202006061254.git.1.dc84fb4.el8	05.06.2020	SB2020060515 SB2020061840 SB2020061844 and 4 more
#VU30318 - Resource exhaustion CVE-2019-11254	CWE-400	Medium	No	No	4.5.0-202007012112.p0.git.0.582d7fc.el7, 4.5.0-202007012112.p0.git.0.582d7fc.el8	01.04.2020	SB2020040177 SB2020061975 SB2023021634 and 6 more
#VU26474 - Uncontrolled Memory Allocation CVE-2020-8552	CWE-789	Medium	No	No	4.2.29-202004110432.git.0.f7d02c8.el8, 4.2.29-202004120346.git.0.d948116.el7, 4.3.9-202003230116.git.0.ebf9a26.el7, 4.3.9-202003230116.git.0.ebf9a26.el8	31.03.2020	SB2020033111 SB2020040174 SB2020042251 and 6 more
#VU26473 - Uncontrolled Memory Allocation CVE-2020-8551	CWE-789	Low	No	No	4.3.10-202003300855.git.0.da48c1d.el7, 4.3.10-202003300855.git.0.da48c1d.el8	31.03.2020	SB2020033111 SB20200407139 SB2020071556
#VU26412 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2019-11236	CWE-93	Medium	Available	No	4.3.28-202006270952.p0.git.0.3d5309c.el7, 4.3.28-202006270952.p0.git.0.3d5309c.el8, 4.4.0-202006271254.p0.git.0.00954ea.el7, 4.4.0-202006271254.p0.git.0.00954ea.el8	26.03.2020	SB2020032626 SB2020031827 SB2019091504 and 36 more
#VU26393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2163	CWE-79	Low	No	No	4.3.25-202006060952.git.1.96c30f6.el7, 4.3.25-202006060952.git.1.96c30f6.el8, 4.4.0-202006061254.git.1.dc84fb4.el7, 4.4.0-202006061254.git.1.dc84fb4.el8	26.03.2020	SB2020032622 SB2020032668 SB2020061738 and 1 more
#VU26392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2162	CWE-79	Low	No	No	4.3.25-202006060952.git.1.96c30f6.el7, 4.3.25-202006060952.git.1.96c30f6.el8, 4.4.0-202006061254.git.1.dc84fb4.el7, 4.4.0-202006061254.git.1.dc84fb4.el8	26.03.2020	SB2020032622 SB2020032667 SB2020061738 and 1 more
#VU26391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2161	CWE-79	Low	No	No	4.3.25-202006060952.git.1.96c30f6.el7, 4.3.25-202006060952.git.1.96c30f6.el8, 4.4.0-202006061254.git.1.dc84fb4.el7, 4.4.0-202006061254.git.1.dc84fb4.el8	26.03.2020	SB2020032622 SB2020032662 SB2020061738 and 1 more
#VU26390 - Cross-Site Request Forgery (CSRF) CVE-2020-2160	CWE-352	Low	No	No	4.3.25-202006060952.git.1.96c30f6.el7, 4.3.25-202006060952.git.1.96c30f6.el8, 4.4.0-202006061254.git.1.dc84fb4.el7, 4.4.0-202006061254.git.1.dc84fb4.el8	26.03.2020	SB2020032622 SB2020032661 SB2020061738 and 1 more
#VU25501 - Use After Free CVE-2020-8945	CWE-416	High	No	No	4.3.10-202003300855.git.0.da48c1d.el7, 4.3.10-202003300855.git.0.da48c1d.el8, 4.4.0-202007090832.p0.git.0.bc32fb1.el7, 4.4.0-202007090832.p0.git.0.bc32fb1.el8, 4.5.0-202007012112.p0.git.0.582d7fc.el7, 4.5.0-202007012112.p0.git.0.582d7fc.el8	21.02.2020	SB2020022110 SB2020031116 SB2020031126 and 23 more
#VU24763 - Exposure of sensitive information to an unauthorized actor CVE-2020-2104	CWE-200	Low	No	No	4.3.5-202002280657.git.0.b3bfb5a.el7, 4.3.5-202002280657.git.0.b3bfb5a.el8	30.01.2020	SB2020013005 SB20200310153
#VU24762 - Exposure of sensitive information to an unauthorized actor CVE-2020-2103	CWE-200	Low	No	No	4.3.5-202002280657.git.0.b3bfb5a.el7, 4.3.5-202002280657.git.0.b3bfb5a.el8	30.01.2020	SB2020013005 SB20200310153
#VU24761 - Cryptographic Issues CVE-2020-2102	CWE-310	Medium	No	No	4.3.5-202002280657.git.0.b3bfb5a.el7, 4.3.5-202002280657.git.0.b3bfb5a.el8	30.01.2020	SB2020013005 SB20200310153
#VU24760 - Exposure of sensitive information to an unauthorized actor CVE-2020-2101	CWE-200	Medium	No	No	4.3.5-202002280657.git.0.b3bfb5a.el7, 4.3.5-202002280657.git.0.b3bfb5a.el8	30.01.2020	SB2020013005 SB20200310153
#VU24759 - Resource Management Errors CVE-2020-2100	CWE-399	Medium	No	No	4.3.5-202002280657.git.0.b3bfb5a.el7, 4.3.5-202002280657.git.0.b3bfb5a.el8	30.01.2020	SB2020013005 SB20200310153
#VU24758 - Improper Authentication CVE-2020-2099	CWE-287	High	No	No	4.3.5-202002280657.git.0.b3bfb5a.el7, 4.3.5-202002280657.git.0.b3bfb5a.el8	30.01.2020	SB2020013004 SB20200310153
#VU21780 - Improper Certificate Validation CVE-2019-11324	CWE-295	Medium	Available	No	4.3.28-202006270952.p0.git.0.3d5309c.el7, 4.3.28-202006270952.p0.git.0.3d5309c.el8, 4.4.0-202006271254.p0.git.0.00954ea.el7, 4.4.0-202006271254.p0.git.0.00954ea.el8	15.10.2019	SB2019041823 SB2020031827 SB2019091504 and 19 more

Showing elements 241 - 260 out of 269

Known vulnerabilities in openshift (Red Hat package) - page 13

Breakdown by Severity Chart

Vulnerabilities (269)

Please verify you're human