Known vulnerabilities in Red Hat OpenShift Container Platform 3.11.0 - page 6

Version: 3.11.0
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_container_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 137
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat OpenShift Container Platform version 3.11.0 Red Hat OpenShift Container Platform 3.11.0 is affected by 137 vulnerabilities: 1 critical, 36 high, 53 medium, 47 low Critical High Medium Low

Vulnerabilities (137)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22824 - Resource exhaustion
CVE-2019-11253
CWE-400 Medium
No
No
- 18.11.2019 SB2019101712
SB2019111815
SB2020020731
and 12 more
#VU22822 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-3889
CWE-79 Low
No
No
4.1.22, 4.2.4, 3.11.0 18.11.2019 SB2019111813
SB2020031950
#VU22431 - UNIX Symbolic Link (Symlink) Following
CVE-2019-11251
CWE-61 Low
No
No
4.1.21 31.10.2019 SB2019103102
SB2019103103
SB2019103104
and 1 more
#VU20201 - Resource exhaustion
CVE-2019-9514
CWE-400 Medium
No
No
3.9, 3.11.154, 4.1.17, 4.1.20, 4.1.21, 4.2.1 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more
#VU20200 - Resource exhaustion
CVE-2019-9512
CWE-400 Medium
No
No
3.9, 3.11.154, 4.1.17, 4.1.20, 4.1.21, 4.2.1 13.08.2019 SB2019081326
SB2019082006
SB2019082502
and 72 more
#VU19943 - Deserialization of Untrusted Data
CVE-2018-12023
CWE-502 Medium
No
No
- 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 20 more
#VU19942 - Deserialization of Untrusted Data
CVE-2018-12022
CWE-502 Medium
No
No
- 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 18 more
#VU19938 - Deserialization of Untrusted Data
CVE-2018-11307
CWE-502 High
No
No
- 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 17 more
#VU17781 - Improper input validation
CVE-2018-19362
CWE-20 High
No
No
4.6.26 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 38 more
#VU17780 - Improper input validation
CVE-2018-19360
CWE-20 High
No
No
4.6.26 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 22 more
#VU17779 - Improper input validation
CVE-2018-19361
CWE-20 High
No
No
4.6.26 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 23 more
#VU17778 - Improper input validation
CVE-2018-14719
CWE-20 High
No
No
4.6.26 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 22 more
#VU17777 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-14720
CWE-611 Low
No
No
4.6.26 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 21 more
#VU17776 - Server-Side Request Forgery (SSRF)
CVE-2018-14721
CWE-918 Low
No
No
4.6.26 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 23 more
#VU17053 - Permissions, Privileges, and Access Controls
CVE-2018-14718
CWE-264 High
No
No
4.6.26 17.01.2019 SB2019011703
SB2019052407
SB2019091718
and 29 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237
CWE-789 Low
No
No
- 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more
#VU10610 - Deserialization of Untrusted Data
CVE-2018-5968
CWE-502 High
No
No
- 16.02.2018 SB2018021604
SB2018021605
SB2018051725
and 14 more
#VU10257 - Deserialization of Untrusted Data
CVE-2017-17485
CWE-502 High
No
No
- 26.01.2018 SB2017121218
SB2018021605
SB2018051725
and 24 more
#VU9607 - Improper input validation
CVE-2017-15095
CWE-20 High
No
No
- 08.12.2017 SB2017121101
SB2017111609
SB2018051424
and 28 more
#VU9128 - Deserialization of Untrusted Data
CVE-2017-7525
CWE-502 High
Public exploit available
No
- 08.11.2017 SB2017110807
SB2017102005
SB2017120205
and 40 more


Showing elements 101 - 120 out of 137