Known vulnerabilities in openshift (Red Hat package) - page 9

Software CPE: cpe:2.3:o:red_hat:openshift_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 269
Public exploits: 18
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift (Red Hat package) openshift (Red Hat package) is affected by 269 known vulnerabilities: 22 high, 164 medium, 83 low Critical High Medium Low

Vulnerabilities (269)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59583 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20617
CWE-78 Medium
No
No
4.6.0-202201200342.p0.g35fca9a.assembly.stream.el7, 4.6.0-202201200342.p0.g35fca9a.assembly.stream.el8, 4.8.0-202202050715.p0.gb82a451.assembly.stream.el7, 4.8.0-202202050715.p0.gb82a451.assembly.stream.el8, 4.9.0-202201261537.p0.g2cb6068.assembly.stream.el7, 4.9.0-202201261537.p0.g2cb6068.assembly.stream.el8 13.01.2022 SB2022011311
SB2022021019
SB2022021637
and 5 more
#VU57991 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21698
CWE-22 Medium
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110804
SB2021112915
SB2021113017
and 3 more
#VU57989 - Protection Mechanism Failure
CVE-2021-21696
CWE-693 Medium
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57988 - Missing Authorization
CVE-2021-21695
CWE-862 High
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57987 - Permissions, Privileges, and Access Controls
CVE-2021-21694
CWE-264 High
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57986 - Improper Authorization
CVE-2021-21693
CWE-285 High
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57985 - Missing Authorization
CVE-2021-21692
CWE-862 High
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57984 - Missing Authorization
CVE-2021-21691
CWE-862 High
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57983 - Protection Mechanism Failure
CVE-2021-21690
CWE-693 High
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57982 - Missing Authorization
CVE-2021-21689
CWE-862 High
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57981 - Missing Authorization
CVE-2021-21688
CWE-862 Medium
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57980 - Missing Authorization
CVE-2021-21687
CWE-862 Medium
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57979 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21686
CWE-22 Medium
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57978 - Missing Authorization
CVE-2021-21685
CWE-862 High
No
No
4.6.0-202111100230.p0.git.6063298.assembly.stream.el7, 4.6.0-202111100230.p0.git.6063298.assembly.stream.el8, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el7, 4.7.0-202111192046.p0.gaa025a0.assembly.stream.el8, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el7, 4.8.0-202111221934.p0.g81bc627.assembly.stream.el8, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el7, 4.9.0-202111231108.p0.g4dd1b5a.assembly.stream.el8 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU56829 - Improper input validation
CVE-2021-29923
CWE-20 Medium
No
No
4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7, 4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8 22.09.2021 SB2021092225
SB2021092226
SB2021100408
and 37 more
#VU56401 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-40346
CWE-444 Medium
Available
No
4.6.0-202112092023.p0.g845f228.assembly.stream.el7, 4.6.0-202112092023.p0.g845f228.assembly.stream.el8, 4.7.0-202201082234.p0.ge880017.assembly.stream.el7, 4.7.0-202201082234.p0.ge880017.assembly.stream.el8, 4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7, 4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8, 4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7, 4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8 08.09.2021 SB2021090813
SB2021090814
SB2021111101
and 11 more
#VU55971 - Improper input validation
CVE-2021-39242
CWE-20 Medium
No
No
4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7, 4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8, 4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7, 4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8 18.08.2021 SB2021081816
SB2021081819
SB2021111101
and 4 more
#VU55970 - Improper input validation
CVE-2021-39241
CWE-20 Medium
No
No
4.6.0-202112092023.p0.g845f228.assembly.stream.el7, 4.6.0-202112092023.p0.g845f228.assembly.stream.el8, 4.7.0-202201082234.p0.ge880017.assembly.stream.el7, 4.7.0-202201082234.p0.ge880017.assembly.stream.el8, 4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7, 4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8, 4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7, 4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8 18.08.2021 SB2021081816
SB2021081819
SB2021111101
and 7 more
#VU55969 - Improper input validation
CVE-2021-39240
CWE-20 Medium
No
No
4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7, 4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8, 4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7, 4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8 18.08.2021 SB2021081816
SB2021081819
SB2021111101
and 4 more
#VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-36221
CWE-362 Medium
No
No
4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7, 4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8 10.08.2021 SB2021081001
SB2021081217
SB2021081219
and 32 more


Showing elements 161 - 180 out of 269