Known vulnerabilities in Red Hat OpenShift Container Platform - page 111

Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_container_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 2229
Public exploits: 122
Known exploited (KEV): 31
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Container Platform Red Hat OpenShift Container Platform is affected by 2229 known vulnerabilities: 7 critical, 265 high, 732 medium, 1225 low Critical High Medium Low

Vulnerabilities (2229)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU21437 - Cross-Site Request Forgery (CSRF)
CVE-2019-10384
CWE-352 Low
No
No
4.1.16 30.09.2019 SB2019082820
SB2019092016
SB2019083013
and 1 more
#VU21117 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10383
CWE-79 Low
No
No
4.1.16 16.09.2019 SB2019082820
SB2019092016
SB2019083013
and 1 more
#VU30803 - Permissions, Privileges, and Access Controls
CVE-2019-11246
CWE-264 Medium
No
No
- 29.08.2019 SB2019082915
SB2019062722
SB2019062723
and 3 more
#VU30806 - Permissions, Privileges, and Access Controls
CVE-2019-11249
CWE-264 Medium
No
No
4.1.16 29.08.2019 SB2019082915
SB2019080656
SB2019103060
and 2 more
#VU20337 - Resource Management Errors
CVE-2019-9515
CWE-399 Medium
No
No
- 20.08.2019 SB2019082005
SB2019082402
SB2019091011
and 39 more
#VU19941 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12086
CWE-200 Medium
No
No
- 06.08.2019 SB2019052407
SB2019092703
SB2019100116
and 31 more
#VU19280 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-10352
CWE-22 Medium
No
No
- 22.07.2019 SB2019081514
SB2019082816
#VU19279 - Cross-Site Request Forgery (CSRF)
CVE-2019-10353
CWE-352 Low
No
No
- 22.07.2019 SB2019081514
SB2019082816
#VU19268 - Authentication Bypass Using an Alternate Path or Channel
CVE-2019-10354
CWE-288 Low
No
No
- 19.07.2019 SB2019081514
SB2019082816
#VU19018 - Deserialization of Untrusted Data
CVE-2019-12384
CWE-502 High
No
No
- 04.07.2019 SB2019091218
SB2019092703
SB2019100116
and 28 more
#VU18961 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12814
CWE-200 Medium
No
No
- 02.07.2019 SB2019062606
SB2019092703
SB2019100116
and 25 more
#VU31128 - Improper Link Resolution Before File Access ('Link Following')
CVE-2019-1002101
CWE-59 Low
No
No
- 01.04.2019 SB2019040109
SB2019062722
SB2019062723
and 6 more
#VU18085 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-7609
CWE-94 Medium
Available
Exploited
- 27.03.2019 SB2019032702
SB2019022505
SB2019100107
#VU18084 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7608
CWE-79 Medium
No
No
- 27.03.2019 SB2019032702
SB2019022505
SB2019100107
#VU18083 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-7610
CWE-94 High
No
No
- 27.03.2019 SB2019032702
SB2019022505
SB2019100107
#VU17107 - Out-of-bounds read
CVE-2018-20615
CWE-125 Medium
No
No
- 22.01.2019 SB2019012202
SB2019011509
SB2019021406
and 3 more
#VU16950 - Permissions, Privileges, and Access Controls
CVE-2019-0542
CWE-264 High
No
No
- 08.01.2019 SB2019011110
SB2019061005
SB2019082201
and 1 more
#VU16224 - Permissions, Privileges, and Access Controls
CVE-2018-1002105
CWE-264 High
Available
No
- 04.12.2018 SB2018120403
SB2018120410
SB2018120411
and 8 more
#VU11268 - Deserialization of Untrusted Data
CVE-2018-7489
CWE-502 High
No
No
- 26.03.2018 SB2018021604
SB2018041910
SB2018050306
and 29 more
#VU10610 - Deserialization of Untrusted Data
CVE-2018-5968
CWE-502 High
No
No
- 16.02.2018 SB2018021604
SB2018021605
SB2018051725
and 15 more


Showing elements 2201 - 2220 out of 2229