Known vulnerabilities in Red Hat OpenShift Container Platform 3.11.0 - page 5

Version: 3.11.0
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_container_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 137
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat OpenShift Container Platform version 3.11.0 Red Hat OpenShift Container Platform 3.11.0 is affected by 137 vulnerabilities: 1 critical, 36 high, 53 medium, 47 low Critical High Medium Low

Vulnerabilities (137)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30267 - Server-Side Request Forgery (SSRF)
CVE-2020-8555
CWE-918 Medium
No
No
- 05.06.2020 SB2020060515
SB2020061840
SB2020061844
and 4 more
#VU30318 - Resource exhaustion
CVE-2019-11254
CWE-400 Medium
No
No
- 01.04.2020 SB2020040177
SB2020061975
SB2023021634
and 6 more
#VU26397 - Improper input validation
CVE-2020-2167
CWE-20 High
No
No
3.11.188 26.03.2020 SB2020032620
SB2020032705
#VU26006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2136
CWE-79 Low
No
No
- 11.03.2020 SB2020031129
SB2020063006
SB2020061842
and 1 more
#VU26005 - Permissions, Privileges, and Access Controls
CVE-2020-2135
CWE-264 High
No
No
- 11.03.2020 SB2020031128
SB2020063006
SB2020061842
and 1 more
#VU26004 - Permissions, Privileges, and Access Controls
CVE-2020-2134
CWE-264 High
No
No
- 11.03.2020 SB2020031128
SB2020063006
SB2020061842
and 1 more
#VU25591 - Incorrect Default Permissions
CVE-2019-19351
CWE-276 Low
No
No
4.2.20, 4.3.3, 3.11.188 25.02.2020 SB2020022515
SB2020032010
#VU25281 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2111
CWE-79 Low
No
No
- 13.02.2020 SB2020021304
SB2020063006
SB2020061842
and 1 more
#VU25280 - Permissions, Privileges, and Access Controls
CVE-2020-2110
CWE-264 High
No
No
- 13.02.2020 SB2020021303
SB2020063006
SB2020061842
and 1 more
#VU25279 - Permissions, Privileges, and Access Controls
CVE-2020-2109
CWE-264 High
No
No
- 13.02.2020 SB2020021302
SB2020063006
SB2020061842
and 1 more
#VU24692 - Out-of-bounds write
CVE-2019-13734
CWE-787 High
No
No
4.2.18 28.01.2020 SB2019122301
SB2020012805
SB2020012806
and 15 more
#VU23636 - Unprotected Storage of Credentials
CVE-2019-11250
CWE-256 Low
No
No
4.1.27 17.12.2019 SB2019082909
SB2019121707
SB2019121704
and 15 more
#VU23633 - Improper input validation
CVE-2017-18367
CWE-20 Low
No
No
4.1.27 17.12.2019 SB2019042410
SB2019121704
SB2020061975
and 1 more
#VU23548 - Improper input validation
CVE-2019-11255
CWE-20 Low
No
No
4.1.27, 4.2.10 11.12.2019 SB2019121118
SB2019121117
SB2019121613
and 1 more
#VU22937 - Incorrect Default Permissions
CVE-2019-11244
CWE-276 Low
No
No
4.1.24 22.11.2019 SB2019042208
SB2019112219
SB2020011411
and 1 more
#VU22916 - Improper Access Control
CVE-2019-16538
CWE-284 High
No
No
- 22.11.2019 SB2019112205
SB2020063006
SB2020061842
and 1 more
#VU21523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10432
CWE-79 Low
No
No
4.1.27, 4.2.10 03.10.2019 SB2019100404
SB2019121117
SB2019121612
and 1 more
#VU21522 - Permissions, Privileges, and Access Controls
CVE-2019-10431
CWE-264 High
No
No
4.1.27, 4.2.10 03.10.2019 SB2019100704
SB2019121117
SB2019121612
and 1 more
#VU21118 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-10392
CWE-78 Medium
No
No
4.1.38, 4.2.20, 4.3.3 16.09.2019 SB2019091607
SB2020061842
SB2020022451
and 2 more
#VU370 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2016-2183
CWE-327 Low
Public exploit available
No
- 08.09.2016 SB2016082601
SB2017053118
SB2017011701
and 49 more


Showing elements 81 - 100 out of 137