RH
Product
Red Hat OpenShift Container Platform 4.15
On CISA KEVExploited in the wild
97
CVEs
1
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 11High 77Medium 9Low 0
Watch
Add Red Hat OpenShift Container Platform 4.15 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3012 | 6.8 | May 27 | Samba: group policy certificate enrollment uses http:// without validation Affected: All versions, or not specified |
| CVE-2026-1933 | 6.5 | May 27 | Samba: missing access check on reparse point operations Affected: All versions, or not specified |
| CVE-2026-2340 | 6.5 | May 27 | Samba: vfs_worm does not block directory modification Affected: All versions, or not specified |
| CVE-2026-35469 | 6.5 | Apr 16 | SpdyStream: DOS on CRI Affected: All versions, or not specified |
| CVE-2026-39979 | 6.5 | Apr 13 | jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers Affected: All versions, or not specified |
| CVE-2026-83589 | 6.1 | Oct 1 | Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect Affected: All versions, or not specified |
| CVE-2025-13465 | 5.3 | Jan 21 | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified |
| CVE-2024-0874 | 5.3 | Apr 25 | Coredns: cd bit response is cached and served later Affected: All versions, or not specified |
| CVE-2026-40175 | 4.8 | Apr 10 | Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Affected: All versions, or not specified |
Showing 9