Known vulnerabilities in OpenShift Virtualization - page 21

Software CPE: cpe:2.3:a:red_hat:openshift_virtualization:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Total vulnerabilities: 536
Public exploits: 38
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Virtualization OpenShift Virtualization is affected by 536 known vulnerabilities: 2 critical, 96 high, 233 medium, 205 low Critical High Medium Low

Vulnerabilities (536)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996
CWE-942 Low
No
No
4.9.7, 4.10.5 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
4.10.1, 4.10.2, 4.11.0 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Available
No
4.9.4, 4.10.1, 4.11.0 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61110 - Use of Uninitialized Resource
CVE-2022-0847
CWE-908 Low
Available
Exploited
4.9.4 08.03.2022 SB2022030808
SB2022031019
SB2022031026
and 27 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407
CWE-89 High
No
No
4.9.4, 4.10.0, 4.10.1, 4.11.0 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU60739 - Integer overflow
CVE-2022-25315
CWE-190 High
No
No
4.9.4, 4.10.1 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235
CWE-94 High
No
No
4.9.4, 4.10.1 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236
CWE-20 Medium
No
No
4.9.4, 4.10.1 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU58229 - Type confusion
CVE-2021-41190
CWE-843 Low
No
No
4.10.1 18.11.2021 SB2021111806
SB2021111807
SB2021111809
and 39 more
#VU56829 - Improper input validation
CVE-2021-29923
CWE-20 Medium
No
No
2.6.8, 4.8.3, 4.10.0 22.09.2021 SB2021092225
SB2021092226
SB2021100408
and 37 more
#VU56217 - Memory corruption
CVE-2021-3634
CWE-119 High
No
No
4.11.0 31.08.2021 SB2021083135
SB2021083136
SB2022011903
and 46 more
#VU56024 - Resource Management Errors
CVE-2021-33198
CWE-399 Medium
No
No
2.6.10, 4.8.2, 4.8.5, 4.9.0, 4.9.2, 4.10.0 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 46 more
#VU56023 - Missing Authorization
CVE-2021-33197
CWE-862 Medium
No
No
2.6.10, 4.8.2, 4.8.5, 4.9.0, 4.9.2, 4.10.0 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 41 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195
CWE-79 Medium
No
No
2.6.10, 4.8.2, 4.8.5, 4.9.0, 4.9.2, 4.10.0 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-36221
CWE-362 Medium
No
No
4.9.4, 4.10.0, 4.10.1 10.08.2021 SB2021081001
SB2021081217
SB2021081219
and 32 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558
CWE-295 Medium
Available
No
2.6.7, 2.6.8, 4.8.1, 4.8.2, 4.8.5, 4.9.0, 4.9.2, 4.10.0 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU54089 - Stack-based buffer overflow
CVE-2020-17541
CWE-121 High
No
No
4.11.0 14.06.2021 SB2019123105
SB2021061118
SB2021061119
and 8 more
#VU53978 - Improper input validation
CVE-2021-3580
CWE-20 Medium
No
No
4.11.0 09.06.2021 SB2021060918
SB2021060919
SB2021061812
and 22 more
#VU52196 - Stack-based buffer overflow
CVE-2020-35492
CWE-121 High
No
No
4.11.0 18.03.2021 SB2021031823
SB2021041369
SB2022051130
and 10 more
#VU45992 - Integer underflow
CVE-2020-24370
CWE-191 Medium
No
No
4.11.0 17.08.2020 SB2020082504
SB2021111132
SB2021062913
and 22 more


Showing elements 401 - 420 out of 536