Skip to contentRed Hat Openshift vulnerabilities
- red hat openshift/mysql-apb, redhat openshift container platform +1 moreIt has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from...CVE-2020-17087.0 High
- openshift origin origin, red hat openshift origin, redhat openshift +2 moreThe download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary...CVE-2013-20609.8 Critical
- redhat openshift container platform, [red hat] openshift-ansible +1 moreA flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster....CVE-2019-14819Fix available7.5 High
- red hat openshift, redhat openshift container platform +1 moreSensitive Data Exposure in Openshift Container PlatformCVE-2019-102135.3 Medium
- red hat openshiftA vulnerability was found in OpenShift builds, versions 4.1 up to 4.3. Builds that extract source from a container image, bypass the TLS hostname verification. An attacker can take advantage of this f…CVE-2019-148455.7 Medium
- redhat openshift container platform, red hat atomic-openshift +1 moreA flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF...CVE-2019-101764.2 Medium
- red hat atomic-openshift, redhat openshift +1 moreA vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able...CVE-2019-38843.6 Low
- red hat openshift, redhat openshift container platform +1 moreOpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit...CVE-2019-101652.3 Low
- redhat openshift container platform, red hat atomic-openshift +1 moreA reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform...CVE-2019-3889Fix available4.6 Medium
- redhat openshift container platform, red hat atomic-openshift +1 moreIt was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host...CVE-2019-10150Fix available5.9 Medium
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 morefast-uri vulnerable to host confusion via percent-encoded authority delimitersCVE-2026-6322Fix available7.5 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +32 more +34 morefast-uri vulnerable to path traversal via percent-encoded dot segmentsCVE-2026-6321Fix available7.5 High
- red hat openshift container platformA cross site scripting flaw exists in the tetonic-console component of Openshift Container...CVE-2018-109374.6 Medium
- kubernetes, red hat openshift +1 moreIt was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509...CVE-2016-7075Fix available7.5 High
- redhat openshift container platform, starcounter-jack json-patch, red hat atomic-openshift +2 moreJSON-Patch Out-of-bounds Write vulnerabilityCVE-2018-14632Fix available7.7 High
- [unknown] atomic-openshift, redhat openshift container platform +1 moreThe OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker...CVE-2017-151385.0 Medium
- redhat openshift, red hat openshift enterprise, redhat openshift container platform +2 moreAn input validation flaw was found in the way OpenShift 3 handles requests for images. A user,...CVE-2016-8651Fix available3.1 Low
- red hat openshift enterprise, redhat openshift +1 moreThe OpenShift Enterprise 3 router does not properly sort routes when processing newly added...CVE-2016-8631Fix available6.3 Medium
- red hat openshift, redhat openshift container platform +1 moreA flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin....CVE-2017-12195Fix available6.5 Medium
- redhat openshift, [unknown] atomic-openshift, redhat openshift container platform +2 moreThe OpenShift image import whitelist failed to enforce restrictions correctly when running...CVE-2017-151374.3 Medium
- [unknown] atomic-openshift, redhat openshift +1 moreIn atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause...CVE-2018-108856.5 Medium
- [unknown] openshift-ansible, redhat openshift container platform +1 moreopenshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes...CVE-2018-10859.0 Critical
- redhat openshift, red hat atomic-openshift +1 moreA flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An...CVE-2018-1102Fix available8.8 High
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821Fix available9.6 Critical
- openssl, red hat enterprise linux 10, enterprise linux 3 +11 more +13 moreOpenssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypassCVE-2006-4339Fix available9.1 Critical