Skip to contentRedhat Openshift vulnerabilities
- redhat openshift container platform, red hat atomic-openshift +1 moreIt was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host...CVE-2019-10150Fix available5.9 Medium
- envoyproxy envoy, redhat openshift service mesh +1 moreWhen parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero...CVE-2019-99006.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...CVE-2019-2698Public exploitFix availableEPSS 12.0%8.1 High
- oracle corporation java, apache cassandra, tomcat +15 more +17 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2019-2684Fix availableEPSS 37.6%5.9 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2602Fix available7.5 High
- heketi project heketi, redhat openshift container platform +1 moreIt was found that default configuration of Heketi does not require any authentication potentially...CVE-2019-3899Fix available7.3 High
- kubernetes, netapp trident, redhat openshift container platform +2 morekubectl creates world-writeable cached schema filesCVE-2019-11244Fix available3.3 Low
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-1003050Fix available5.4 Medium
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreInsufficient Session Expiration in JenkinsCVE-2019-1003049Fix available8.1 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- red hat web-console, redhat openshift container platform +1 moreWithdrawn Advisory: OpenShift OAuth Server XSS VulnerabilityCVE-2019-38765.0 Medium
- kubernetes, redhat openshift container platform +1 morekubectl cp path traversalCVE-2019-1002101Public exploitFix availableEPSS 12.8%6.4 Medium
- kubernetes, redhat openshift container platform +1 moreKubernetes DoS VulnerabilityCVE-2019-1002100Fix availableEPSS 16.9%6.5 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\, redhat openshift container platform +2 moreSandbox bypass vulnerability in Jenkins Pipeline: Groovy PluginCVE-2019-1003041Fix available9.8 Critical
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreSandbox bypass vulnerability in Jenkins Script Security PluginCVE-2019-1003040Fix available9.8 Critical
- [unknown] prometheus, redhat openshift container platform +1 moreWithdrawn Advisory: Prometheus XSS VulnerabilityCVE-2019-3826Fix available6.1 Medium
- elastic kibana, redhat openshift container platform +1 moreKibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion...CVE-2019-7609In KEVPublic exploitEPSS 95.3%10.0 Critical
- jenkins job dsl, jenkins project job dsl plugin, redhat openshift container platform +2 moreScript security sandbox bypass in Jenkins Job DSL PluginCVE-2019-1003034Fix available9.9 Critical
- jenkins matrix project, jenkins project matrix project plugin, redhat openshift container platform +2 moreScript security sandbox bypass in Matrix Project PluginCVE-2019-1003031Fix available9.9 Critical
- jenkins project pipeline: groovy plugin, jenkins matrix project plugin, pipeline\ +1 more +3 moreSandbox bypass in Jenkins Pipeline: Groovy PluginCVE-2019-1003030In KEVPublic exploitFix availableEPSS 97.1%9.9 Critical
- jenkins script security plugin, script security, redhat openshift container platform +2 moreSandbox bypass in Script Security PluginCVE-2019-1003029In KEVPublic exploitFix availableEPSS 74.4%9.9 Critical
- python, canonical ubuntu linux, debian linux +16 more +18 morePython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...CVE-2019-9636Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +8 more +10 moreDeserialization of Untrusted DataCVE-2018-12023Fix available7.5 High
- fasterxml jackson-databind, debian linux, fedoraproject fedora +8 more +10 morejackson-databind Deserialization of Untrusted Data vulnerabilityCVE-2018-12022Fix available7.5 High
- fasterxml jackson-databind, oracle clusterware, communications instant messaging server +4 more +6 moreDeserialization of Untrusted Data in jackson-databindCVE-2018-11307Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 moreThe KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.CVE-2019-7221Fix available7.8 High
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreJenkins Script Security Plugin sandbox bypass vulnerabilityCVE-2019-1003024Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreIn the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles...CVE-2019-6974Public exploitFix availableEPSS 16.5%8.1 High
- docker, linuxfoundation runc, apache mesos +15 more +17 morerunc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to...CVE-2019-5736Public exploitFix availableEPSS 98.5%8.6 High
- jenkins config file provider, jenkins project config file provider plugin, redhat openshift container platform +2 moreJenkins Config File Provider Plugin XSS vulnerabilityCVE-2019-1003014Fix available4.8 Medium
- jenkins blue ocean, jenkins project blue ocean plugins, redhat openshift container platform +2 moreCross-site Scripting in Jenkins Blue Ocean PluginCVE-2019-1003013Fix available5.4 Medium
- jenkins blue ocean, jenkins project blue ocean plugins, redhat openshift container platform +2 moreCross-Site Request Forgery in Jenkins Blue Ocean PluginCVE-2019-1003012Fix available6.5 Medium
- jenkins token macro, jenkins project token macro plugin, redhat openshift container platform +2 moreJenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoSCVE-2019-1003011Fix available8.1 High
- jenkins git, redhat openshift container platform +1 moreCross-Site Request Forgery in Jenkins Git PluginCVE-2019-1003010Fix available4.3 Medium
- [unknown] kube-rbac-proxy, redhat openshift container platform +1 moreThe kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container...CVE-2019-38183.7 Low
- debian linux, systemd, redhat enterprise linux desktop +5 more +7 moreA memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise...CVE-2019-3815Fix available3.3 Low
- jenkins, redhat openshift container platform +1 moreImproper Authorization in Jenkins CoreCVE-2019-1003004Fix available7.2 High
- jenkins, redhat openshift container platform +1 moreImproper Authorization in Jenkins CoreCVE-2019-1003003Fix available7.2 High
- jenkins project pipeline: declarative plugin, jenkins pipeline\, redhat openshift container platform +2 moreJenkins Pipeline Declarative Plugin sandbox bypass vulnerabilityCVE-2019-1003002Public exploitFix availableEPSS 81.1%8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\, redhat openshift container platform +2 moreJenkins Groovy Plugin sandbox bypass vulnerabilityCVE-2019-1003001Public exploitFix availableEPSS 86.1%8.8 High
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreProtection Mechanism Failure in Jenkins Script Security PluginCVE-2019-1003000Public exploitFix availableEPSS 98.4%8.8 High
- https://xtermjs.org/ xterm.js, redhat openshift container platform +1 morexterm vulnerable to remote code executionCVE-2019-0542Fix available8.8 High
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 morecom.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted DataCVE-2018-19362Fix availableEPSS 10.6%9.8 Critical
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 moreDeserialization of Untrusted Data in jackson-databindCVE-2018-19361Fix availableEPSS 10.6%9.8 Critical
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 moreDeserialization of Untrusted Data in jackson-databind due to polymorphic deserializationCVE-2018-19360Fix availableEPSS 10.6%9.8 Critical
- fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 moreServer-Side Request Forgery (SSRF) in jackson-databindCVE-2018-14721Fix availableEPSS 10.5%10.0 Critical
- fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 moreXML External Entity Reference (XXE) in jackson-databindCVE-2018-14720Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +17 more +19 moreArbitrary Code Execution in jackson-databindCVE-2018-14719Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +22 more +24 moreArbitrary Code Execution in jackson-databindCVE-2018-14718Fix availableEPSS 12.7%9.8 Critical
- haproxy, canonical ubuntu linux, opensuse leap +2 more +4 moreAn out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1...CVE-2018-20615Fix available7.5 High
- Show moreLoading…