Known vulnerabilities in Red Hat OpenShift Serverless

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 445
Public exploits: 25
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless Red Hat OpenShift Serverless is affected by 445 known vulnerabilities: 2 critical, 85 high, 252 medium, 106 low Critical High Medium Low

Vulnerabilities (445)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117610 - Insufficient Verification of Data Authenticity
CVE-2025-40778		 CWE-345 Medium
Available
No
 1 23.10.2025 SB2025102373
SB2025102393
SB20251023133
and 60 more
#VU115751 - Resource exhaustion
CVE-2025-59375		 CWE-400 Medium
No
No
 1 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 107 more
#VU115164 - Improper Authentication
CVE-2025-58060		 CWE-287 High
No
No
 1 11.09.2025 SB2025091139
SB2025091141
SB2025091147
and 28 more
#VU114769 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-8941		 CWE-59 Low
No
No
 1 03.09.2025 SB2025090350
SB2025090372
SB2025090373
and 20 more
#VU113533 - Use After Free
CVE-2025-7425		 CWE-416 High
No
No
 1 31.07.2025 SB2025073137
SB2025073144
SB2025073053
and 56 more
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 1 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more
#VU112936 - Improper input validation
CVE-2025-50059		 CWE-20 High
No
No
 1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU111969 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12718		 CWE-22 Medium
No
No
 1 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 62 more
#VU111968 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4138		 CWE-59 High
Available
No
 1 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 64 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Available
No
 1 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU111389 - Improper Access Control
CVE-2025-6020		 CWE-284 Low
No
No
 1 19.06.2025 SB2025061987
SB2025061992
SB20250619103
and 69 more
#VU111223 - Type confusion
CVE-2025-49796		 CWE-843 Medium
No
No
 1 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 84 more
#VU111221 - Use After Free
CVE-2025-49794		 CWE-416 Medium
No
No
 1 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 65 more
#VU111143 - Double Free
CVE-2025-5914		 CWE-415 High
No
No
 1 16.06.2025 SB2025061602
SB2025061603
SB2025061604
and 51 more
#VU60114 - Integer overflow
CVE-2022-23990		 CWE-190 High
No
No
 1 28.01.2022 SB2022012504
SB2022012804
SB2022020902
and 46 more
#VU22494 - Heap-based Buffer Overflow
CVE-2019-17543		 CWE-122 High
No
No
 1 04.11.2019 SB2019110405
SB2019102917
SB2019102918
and 12 more
#VU6663 - Out-of-bounds read
CVE-2016-9840		 CWE-125 Low
No
No
 1 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 47 more
#VU42119 - Resource exhaustion
CVE-2013-0340		 CWE-400 Medium
No
No
 1 21.01.2014 SB2014012103
SB2017011129
SB2021052301
and 16 more


Showing elements 1 - 20 out of 445