Skip to contentRed Hat Openshift vulnerabilities
- kubernetes kube-apiserver, red hat openshift container platform 4, openshift container platform 4.10 +5 more +7 moreKube-apiserver: privescCVE-2023-1260Fix available8.0 High
- kiali, red hat openshift service mesh 2.1, openshift service mesh 2.3 for rhel 8 +1 more +3 moreKiali: error message spoofing in kiali uiCVE-2022-3962Fix available4.3 Medium
- ovn open virtual network, fedora, red hat fast datapath for rhel 7 +6 more +8 moreService monitor mac flow is not rate limitedCVE-2023-3153Fix available5.3 Medium
- quarkus, red hat openshift serverless 1 on rhel 8, build of optaplanner 8 +20 more +22 moreQuarkus: http security policy bypassCVE-2023-4853Fix available8.1 High
- kubernetes cri-o, redhat openshift container platform, red hat openshift container platform 3.11 +1 more +3 moreCri-o: security regression of cve-2022-27652CVE-2022-34664.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSamba: check attribute access rights for ldap adds of computersCVE-2020-25720Fix available7.5 High
- redhat openshift container platform, red hat openshift serverless, openshift service mesh 2.2.x +13 more +15 moreOcp & fips modeCVE-2023-3089Fix available7.0 High
- red hat openshiftThe Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health...CVE-2023-02965.3 Medium
- kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 moreCri-o: /etc/passwd tampering privescCVE-2022-4318Fix available7.8 High
- red hat openshiftIn Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv...CVE-2013-42815.5 Medium
- red hat openshiftThe deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat...CVE-2013-42537.5 High
- isaacs node-tar, tar, red hat confidential compute attestation +40 more +42 morenode-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path SanitizationCVE-2026-23745Public exploitFix available8.2 High
- red hat openshift enterprise, redhat openshift +1 moreThe default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a...CVE-2014-02349.8 Critical
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 morefast-uri vulnerable to host confusion via percent-encoded authority delimitersCVE-2026-6322Fix available7.5 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +32 more +34 morefast-uri vulnerable to path traversal via percent-encoded dot segmentsCVE-2026-6321Fix available7.5 High
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821Fix available9.6 Critical
- openssl, red hat enterprise linux 10, enterprise linux 3 +11 more +13 moreOpenssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypassCVE-2006-4339Fix available9.1 Critical