Skip to contentRedhat Openshift vulnerabilities
- red hat openshift container platform 4.13, openshift container platform 4.14, openshift container platform 4.15 +5 more +7 moreKubevirt-csi: persistentvolume allows access to hcp's root nodeCVE-2024-1725Fix available6.5 Medium
- netapp active iq unified manager, oncommand workflow automation, red hat openshift serverless +35 more +37 moreUndertow: out-of-memory error after several closed connections with wildfly-http-client protocolCVE-2024-1635Fix available7.5 High
- devfile registry-support, red hat openshift developer tools and services, openshift container platform 4 +1 more +3 moreRegistry-support: decompress can delete files outside scope via relative pathsCVE-2024-1485Fix available8.0 High
- red hat openshift container platform 3.11, openshift container platform 4.13, openshift container platform 4.14 +1 more +3 moreCri-o: pods are able to break out of resource confinement on cgroupv2CVE-2023-6476Fix available6.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +26 more +28 moreKernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalationCVE-2024-0193Fix available7.8 High
- redhat keycloak, red hat migration toolkit for applications 6, migration toolkit for applications 7 +21 more +23 moreKeycloak: redirect_uri validation bypassCVE-2023-6291Fix available7.1 High
- 9bis kitty, apache sshd, sshj +68 more +70 morePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795Public exploitFix availableEPSS 93.5%5.9 Medium
- redhat keycloak, red hat build of keycloak 22, build of keycloak 22.0.7 +10 more +12 moreKeycloak: reflected xss via wildcard in oidc redirect_uriCVE-2023-6134Fix available4.6 Medium
- redhat keycloak, red hat build of keycloak, single sign-on 7.6 for rhel 7 +8 more +10 moreKeycloak: offline session token dosCVE-2023-6563Fix available7.7 High
- red hat openshift container platform 4.11, openshift container platform 4.12, openshift container platform 4.13 +2 more +4 moreOpenshift: modification of node role labelsCVE-2023-5408Fix available7.2 High
- red hat ironic content for red hat openshift container platform 4.12, openstack platform 17.1 for rhel 8, openstack platform 17.1 for rhel 9 +5 more +7 morePython-eventlet: patch regression for cve-2021-21419 in some red hat buildsCVE-2023-5625Fix available5.3 Medium
- golang go, traefik, red hat openshift ai (rhoai) +2 more +4 moreTraefik - Denial of Service via HTTP/2 Request HandlingCVE-2023-54365Fix available8.7 High
- openvswitch, fedora, red hat fast datapath for rhel 7 +12 more +14 moreOpenvswitch don't match packets on nd_target fieldCVE-2023-5366Fix available7.1 High
- red hat advanced cluster management for kubernetes 2, ansible automation platform 1.2, ansible tower 3 +4 more +6 moreOpenshift api admission checks does not enforce "custom-host" permissionsCVE-2022-32484.4 Medium
- red hat openshift container platform 4, redhat openshift container platform +1 moreContent spoofingCVE-2022-41454.3 Medium
- redhat openshift data science, opendatahub open data hub dashboard, red hat openshift data science (rhods) +2 moreS3 credentials included when exporting elyra notebookCVE-2023-33617.7 High
- red hat amq broker 7, rhel-8 based middleware containers, redhat jboss a-mq +2 more +4 moreOperator: passwords defined in secrets shown in statefulset yamlCVE-2023-40665.5 Medium
- redhat undertow, red hat build of quarkus, data grid 8 +25 more +27 moreUndertow: outofmemoryerror due to @multipartconfig handlingCVE-2023-3223Fix available7.5 High
- red hat amq broker 7, rhel-8 based middleware containers, redhat jboss a-mq +2 more +4 moreOperator: plaintext password in operator logCVE-2023-40655.5 Medium
- kubernetes kube-apiserver, red hat openshift container platform 4, openshift container platform 4.10 +5 more +7 moreKube-apiserver: privescCVE-2023-1260Fix available8.0 High
- kiali, red hat openshift service mesh 2.1, openshift service mesh 2.3 for rhel 8 +1 more +3 moreKiali: error message spoofing in kiali uiCVE-2022-3962Fix available4.3 Medium
- redhat single sign-on, red hat single sign-on 7, rhel-8 based middleware containers +4 more +6 moreRhsso-container-image: unsecured management interface exposed to adjecent networkCVE-2022-40398.0 High
- ovn open virtual network, fedora, red hat fast datapath for rhel 7 +6 more +8 moreService monitor mac flow is not rate limitedCVE-2023-3153Fix available5.3 Medium
- quarkus, red hat openshift serverless 1 on rhel 8, build of optaplanner 8 +20 more +22 moreQuarkus: http security policy bypassCVE-2023-4853Fix available8.1 High
- red hat rhods-1.22-rhel-8, redhat openshift data science +1 moreOdh-notebook-controller-container: missing authorization allows for file contents disclosureCVE-2023-09238.8 High
- kubernetes cri-o, redhat openshift container platform, red hat openshift container platform 3.11 +1 more +3 moreCri-o: security regression of cve-2022-27652CVE-2022-34664.8 Medium
- red hat rhol-5.5-rhel-8, rhol-5.6-rhel-8, rhol-5.7-rhel-8 +1 more +3 moreOpenshift-logging: lokistack authorisation is cached too broadlyCVE-2023-44565.7 Medium
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- redhat openshift container platform, red hat openshift serverless, openshift service mesh 2.2.x +13 more +15 moreOcp & fips modeCVE-2023-3089Fix available7.0 High
- redhat keycloak, red hat single sign-on 7, single sign-on 7.6 for rhel 7 +5 more +7 moreKeycloak: oauth client impersonationCVE-2023-2422Fix available5.5 Medium
- keycloak, redhat openshift container platform, openshift container platform for ibm linuxone +2 more +4 moreKeycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDCCVE-2022-4361Public exploitFix available10.0 Critical
- red hat single sign-on 7, single sign-on 7.6 for rhel 7, single sign-on 7.6 for rhel 8 +7 more +9 moreKeycloak: client access via device auth request spoofCVE-2023-2585Fix available3.5 Low
- redhat openshift api for data protection, openshift container platform, openshift developer tools and services +2 moredistribution catalog API endpoint can lead to OOM via malicious user inputCVE-2023-2253Fix available6.5 Medium
- cloudbase open vswitch, debian linux, redhat fast datapath +3 more +5 moreA flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will...CVE-2023-1668Fix available8.2 High
- redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 moreUndertow: infinite loop in sslconduit during closeCVE-2023-1108Fix available7.5 High
- redhat openshift assisted installer, openshift container platform +1 moreOpenShift Assisted Installer leaks image pull secrets as plaintext in installation logsCVE-2021-3684Fix available5.5 Medium
- debian linux, linuxfoundation runc, redhat enterprise linux +1 more +3 moreOpencontainers runc Incorrect Authorization vulnerabilityCVE-2023-27561Fix available7.0 High
- keycloak, redhat openshift container platform, openshift container platform for ibm linuxone +2 more +4 moreKeycloak vulnerable to user impersonation via stolen UUID codeCVE-2023-0264Public exploitFix available5.0 Medium
- keycloak, redhat openshift container platform, single sign-on +2 moreHTML Injection in Keycloak Admin REST APICVE-2022-1274Public exploitFix available5.4 Medium
- redhat openshiftgithub.com/openshift/apiserver-library-go Improper Input Validation vulnerabilityCVE-2023-0229Fix available6.3 Medium
- haproxy, fedoraproject extra packages for enterprise linux, fedora +6 more +8 moreAn uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash...CVE-2023-0056Fix available6.5 Medium
- red hat openshiftThe Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health...CVE-2023-02965.3 Medium
- kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 moreCri-o: /etc/passwd tampering privescCVE-2022-4318Fix available7.8 High
- openshift osin, redhat openshift osin, openshift container platform +2 moreOpenShift OSIN CheckClientSecret timing discrepancyCVE-2021-4294Fix available2.6 Low
- redhat keycloak, red hat single sign-on 7, single sign-on 7.6 for rhel 7 +9 more +11 moreKeycloak: session takeover with oidc offline refreshtokensCVE-2022-3916Fix available6.8 Medium
- redhat openshiftOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...CVE-2022-32597.4 High
- redhat openshiftA flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve...CVE-2022-32628.1 High
- redhat openshiftThe response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking...CVE-2022-32604.8 Medium
- red hat openshiftIn Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv...CVE-2013-42815.5 Medium
- red hat openshiftThe deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat...CVE-2013-42537.5 High
- Show moreLoading…