Known vulnerabilities in OpenShift Virtualization - page 17

Software CPE: cpe:2.3:a:red_hat:openshift_virtualization:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Total vulnerabilities: 536
Public exploits: 38
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Virtualization OpenShift Virtualization is affected by 536 known vulnerabilities: 2 critical, 96 high, 233 medium, 205 low Critical High Medium Low

Vulnerabilities (536)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67412 - Out-of-bounds read
CVE-2020-35527
CWE-125 Medium
No
No
4.11.1, 4.12.0 15.09.2022 SB2020080601
SB2022091540
SB2022102543
and 29 more
#VU67411 - NULL Pointer Dereference
CVE-2020-35525
CWE-476 Medium
No
No
4.11.1, 4.12.0 15.09.2022 SB2020080601
SB2022091540
SB2022092902
and 30 more
#VU66123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3709
CWE-79 Medium
No
No
4.11.1, 4.11.6, 4.11.7, 4.12.0, 4.12.8 05.08.2022 SB2022080507
SB2022080510
SB2022080808
and 43 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629
CWE-330 Medium
No
No
4.11.1, 4.12.0 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66069 - Resource exhaustion
CVE-2022-28131
CWE-400 Medium
No
No
4.12.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66065 - Resource exhaustion
CVE-2022-1962
CWE-400 Medium
No
No
4.12.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705
CWE-444 Medium
No
No
4.12.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU65006 - Out-of-bounds read
CVE-2021-38561
CWE-125 Medium
No
No
4.11.0, 4.11.1, 4.12.0 07.07.2022 SB2022070736
SB2022070742
SB2022071920
and 41 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107
CWE-78 High
No
No
4.11.1, 4.12.0 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU64075 - Out-of-bounds write
CVE-2022-1304
CWE-787 Low
No
No
4.11.1, 4.12.0 08.06.2022 SB2022060814
SB2022060815
SB2022060830
and 66 more
#VU63945 - Out-of-bounds read
CVE-2022-1586
CWE-125 Medium
No
No
4.11.1, 4.12.0 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU63487 - Out-of-bounds write
CVE-2022-1785
CWE-787 High
No
No
4.11.1, 4.12.0 20.05.2022 SB2022052017
SB2022062022
SB2022063027
and 47 more
#VU63013 - Use After Free
CVE-2022-0934
CWE-416 Medium
No
No
4.11.1, 4.12.0 11.05.2022 SB2022051113
SB2022051132
SB2022092222
and 19 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Available
No
4.11.0, 4.11.1, 4.12.0 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391
CWE-93 Medium
No
No
4.11.1, 4.12.0 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU61227 - Incorrect Regular Expression
CVE-2022-24921
CWE-185 Medium
No
No
4.11.0, 4.11.1, 4.12.0 10.03.2022 SB2022031004
SB2022031005
SB2022041208
and 41 more
#VU59042 - Resource exhaustion
CVE-2021-44717
CWE-400 Medium
No
No
4.9.4, 4.10.0, 4.11.0, 4.12.0 16.12.2021 SB2021121610
SB2021121646
SB2022031628
and 32 more
#VU58824 - Improper input validation
CVE-2021-44716
CWE-20 Medium
No
No
4.9.4, 4.10.0, 4.11.0, 4.12.0 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU49882 - Out-of-bounds write
CVE-2021-0308
CWE-787 Low
No
No
4.11.1, 4.12.0 11.01.2021 SB2021011118
SB20210120110
SB2021012101
and 7 more
#VU45872 - Out-of-bounds write
CVE-2020-0256
CWE-787 Medium
No
No
4.11.1, 4.12.0 11.08.2020 SB2020081149
SB2022020339
SB2022110871
and 4 more


Showing elements 321 - 340 out of 536