Known vulnerabilities in Red Hat OpenShift Container Platform - page 102

Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_container_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 2229
Public exploits: 122
Known exploited (KEV): 31
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Container Platform Red Hat OpenShift Container Platform is affected by 2229 known vulnerabilities: 7 critical, 265 high, 732 medium, 1225 low Critical High Medium Low

Vulnerabilities (2229)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73227 - Use of Insufficiently Random Values
CVE-2019-11840
CWE-330 Medium
No
No
3.11.374 10.03.2023 SB2019050924
SB2023031017
SB2023031018
and 2 more
#VU60104 - Improper input validation
CVE-2020-8554
CWE-20 Medium
No
No
3.11.374 27.01.2022 SB2022012749
SB2022012750
SB2022042257
and 2 more
#VU50020 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21615
CWE-367 Medium
No
No
4.5.33, 4.6.17 26.01.2021 SB2021012623
SB2021021723
SB2021022601
and 1 more
#VU49525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21611
CWE-79 Low
No
No
4.5.33, 4.6.17 14.01.2021 SB2021011418
SB2021011453
SB2021012106
and 2 more
#VU49524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21610
CWE-79 Low
No
No
4.5.33, 4.6.17 14.01.2021 SB2021011418
SB2021011452
SB2021012106
and 2 more
#VU49523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21608
CWE-79 Low
No
No
4.5.33, 4.6.17 14.01.2021 SB2021011418
SB2021011450
SB2021012106
and 2 more
#VU49529 - Permissions, Privileges, and Access Controls
CVE-2021-21606
CWE-264 Low
No
No
4.5.33, 4.6.17 13.01.2021 SB2021011418
SB2021011448
SB2021012106
and 2 more
#VU49530 - Memory corruption
CVE-2021-21607
CWE-119 Medium
No
No
4.5.33, 4.6.17 13.01.2021 SB2021011418
SB2021011449
SB2021012106
and 2 more
#VU49531 - Permissions, Privileges, and Access Controls
CVE-2021-21609
CWE-264 Low
No
No
4.5.33, 4.6.17 13.01.2021 SB2021011418
SB2021011451
SB2021012106
and 2 more
#VU48976 - Information Exposure Through Log Files
CVE-2020-8563
CWE-532 Low
No
No
4.6.8 07.12.2020 SB2020121507
SB2020121508
SB2020121509
#VU48231 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-2304
CWE-611 Medium
No
No
4.4.33 04.11.2020 SB2020110942
SB2021020406
#VU48232 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-2305
CWE-611 Medium
No
No
4.4.33 04.11.2020 SB2020110943
SB2021020406
#VU47741 - Heap-based Buffer Overflow
CVE-2020-15999
CWE-122 Critical
Available
Exploited
4.5.20, 4.5.21 20.10.2020 SB2020102038
SB2020102039
SB2020102040
and 43 more
#VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26137
CWE-93 Medium
No
No
3.11.374, 3.11.784 30.09.2020 SB2020100716
SB2020121420
SB2021052028
and 35 more
#VU32881 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-20907
CWE-835 Medium
No
No
4.5.20, 4.5.23 29.07.2020 SB2020071324
SB2020080201
SB2020082408
and 53 more
#VU34130 - Permissions, Privileges, and Access Controls
CVE-2020-8559
CWE-264 Medium
Available
No
3.11.343, 4.4.32, 4.5.21 22.07.2020 SB2020072221
SB2020120203
SB2020121809
and 6 more
#VU29290 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2020-8177
CWE-644 Low
No
No
4.5.20, 4.5.23 25.06.2020 SB2020062511
SB2020062514
SB2020063002
and 27 more
#VU34374 - Improper input validation
CVE-2019-20811
CWE-20 Low
No
No
4.5.20 03.06.2020 SB2020060360
SB2020112302
SB2020112432
and 16 more
#VU48780 - Memory corruption
CVE-2015-8011
CWE-119 High
No
No
4.5.23, 4.6.8, 4.6.9 28.01.2020 SB2020012836
SB2020120408
SB2020120409
and 17 more
#VU35005 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-1002102
CWE-601 Low
No
No
3.11.343 05.12.2019 SB2019120529
SB2020121809
SB2020010218


Showing elements 2021 - 2040 out of 2229