Skip to contentRedhat Openshift vulnerabilities
- fasterxml jackson-databind, debian linux, netapp oncommand balance +18 more +20 morejackson-databind is vulnerable to a deserialization flawCVE-2017-7525Public exploitFix availableEPSS 37.7%9.8 Critical
- kubernetes, redhat openshift +1 moreKubernetes in OpenShift3 Access Control MisconfigurationCVE-2015-7561Fix available3.1 Low
- libffi project libffi, debian linux, oracle peopletools +3 more +5 morelibffi requests an executable stack allowing attackers to more easily trigger arbitrary code...CVE-2017-1000376Fix available7.0 High
- [unknown] ansible, canonical ubuntu linux, debian linux +7 more +9 moreAnsible fails to properly mark lookup-plugin results as unsafeCVE-2017-7481Fix available5.3 Medium
- redhat openshiftRed Hat OpenShift Enterprise 2 does not include the HTTPOnly flag in a Set-Cookie header for the...CVE-2016-54097.5 High
- libarchive, oracle linux, redhat enterprise linux desktop +7 more +9 moreThe sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non...CVE-2016-5418Fix available7.5 High
- redhat openshiftRed Hat Security Advisory: atomic-openshift security and bug fix updateCVE-2016-5392Fix available6.5 Medium
- libgd, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd)...CVE-2016-5766Fix available8.8 High
- redhat openshiftRed Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows...CVE-2016-37388.8 High
- redhat openshift, openshift origin +1 moreRed Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security, bug fix, and enhancement updateCVE-2016-37113.3 Low
- redhat openshiftRed Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a...CVE-2016-37087.1 High
- redhat openshiftRed Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when...CVE-2016-3703Fix available5.3 Medium
- redhat openshift, openshift origin +1 moreRed Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security, bug fix, and enhancement updateCVE-2016-21608.8 High
- redhat openshiftRed Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another...CVE-2016-21496.5 Medium
- redhat openshiftRed Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master...CVE-2016-2142Fix available5.5 Medium
- jenkins, redhat openshift +1 moreJenkins Exposes Sensitive Information via API URLCVE-2016-3727Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins affected by Open Redirect VulnerabilityCVE-2016-3726Fix available7.4 High
- jenkins, redhat openshift +1 moreMissing permissions check in Jenkins CoreCVE-2016-3725Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins Exposes Sensitive Information from Job ConfigurationCVE-2016-3724Fix available6.5 Medium
- jenkins, redhat openshift +1 moreExposure of Sensitive Information in Jenkins CoreCVE-2016-3723Fix available4.3 Medium
- jenkins, redhat openshift +1 moreIncorrect Authorization in Jenkins CoreCVE-2016-3722Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins allows Remote Users to Inject Build ParametersCVE-2016-3721Fix available6.5 Medium
- kubernetes, redhat openshift +1 moreInformation Exposure in KubernetesCVE-2015-7528Fix available5.3 Medium
- jenkins, redhat openshift +1 moreJenkins allows Deserialization of Untrusted Data via an XML FileCVE-2016-0792Public exploitFix availableEPSS 83.3%8.8 High
- jenkins, redhat openshift +1 moreExposure of Sensitive Information in Jenkins CoreCVE-2016-0791Fix available9.8 Critical
- jenkins, redhat openshift +1 moreExposure of Sensitive Information in Jenkins CoreCVE-2016-0790Fix available5.3 Medium
- jenkins, redhat openshift +1 moreJenkins has CRLF Injection Vulnerability in the CLICVE-2016-0789Fix available6.1 Medium
- jenkins, redhat openshift +1 moreJenkins allows Execution of Code by Opening a JRMP ListenerCVE-2016-0788Fix availableEPSS 11.8%9.8 Critical
- openvswitch, redhat openshift +1 moreBuffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2...CVE-2016-2074Fix available9.8 Critical
- jenkins, redhat openshift +1 moreJenkins does not Verify Checksums for Plugin FilesCVE-2015-7539Fix available7.5 High
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Cross-Site Request Forgery (CSRF) AttackCVE-2015-7538Fix available8.8 High
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Cross-Site Request Forgery (CSRF) AttackCVE-2015-7537Fix available8.8 High
- redhat data grid, jboss a-mq, openshift +12 more +14 moreDeserialization of Untrusted Data in Apache commons collectionsCVE-2015-7501Known exploitedPublic exploitFix availableEPSS 85.6%9.8 Critical
- apache activemq, fedoraproject fedora, redhat openshift +2 moreImproper Input Validation in Apache ActiveMQCVE-2015-5254Public exploitFix availableEPSS 38.2%9.8 Critical
- jenkins, redhat openshift container platform +1 moreJenkins CLI Deserialization of Untrusted Data vulnerabilityCVE-2015-8103Public exploitFix availableEPSS 91.9%9.8 Critical
- jenkins, redhat openshift +1 moreJenkins allows Cross-Site Scripting (XSS)CVE-2015-5326Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins allows Bypass of Access RestrictionsCVE-2015-5325Fix available7.5 High
- jenkins, redhat openshift +1 moreJenkins allows Unauthorized Viewing of Queue API InformationCVE-2015-5324Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins allows Administrators to Access API TokensCVE-2015-5323Fix available6.5 Medium
- jenkins, redhat openshift +1 moreJenkins has Local File Inclusion VulnerabilityCVE-2015-5322Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins has Information Disclosure via Sidepanel WidgetCVE-2015-5321Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins allows Exposure of Sensitive Information to an Unauthorized ActorCVE-2015-5320Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLICVE-2015-5319Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Cross-Site Request Forgery (CSRF) AttackCVE-2015-5318Fix available6.8 Medium
- jenkins, jenkins user interface (ui), redhat openshift +2 moreJenkins discloses project names via fingerprintsCVE-2015-5317In KEVFix availableEPSS 23.0%5.0 Medium
- redhat openshiftDirectory Traversal in KubernetesCVE-2015-5305Fix available6.4 Medium
- jenkins, redhat openshift +1 moreJenkins allows for Privilege Escalation by Remote Authenticated UsersCVE-2015-1814Fix available7.5 High
- jenkins, redhat openshift +1 moreJenkins allows Cross-Site Scripting (XSS)CVE-2015-1813Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins Cross-site Scripting vulnerabilityCVE-2015-1812Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins does not Restrict Reserved Names Allowing for Privilege EscalationCVE-2015-1810Fix available4.6 Medium
- Show moreLoading…