OP
Product
Openshift
On CISA KEVExploited in the wild
145
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 47Medium 42Low 5
Watch
Add Openshift to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5317 In wildKEV | 7.5 | Nov 25 | The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request Affected: 2.0; through 3.1 |
| CVE-2014-0234 | 9.8 | Feb 12 | The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the… Affected: before 2.1 |
| CVE-2013-2060 | 9.8 | Jan 28 | The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart Affected: 1.0 |
| CVE-2014-0175 | 9.8 | Dec 13 | mcollective has a default password set at install Affected: 1.0; 2.1 |
| CVE-2015-7501 | 9.8 | Nov 9 | Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x;… Affected: 3.0 |
| CVE-2016-2074 | 9.8 | Jul 3 | Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted… Affected: 3.1 |
| CVE-2016-0791 | 9.8 | Apr 7 | Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection… Affected: 3.1 |
| CVE-2016-0788 | 9.8 | Apr 7 | The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener Affected: 3.1 |
| CVE-2015-5254 | 9.8 | Jan 8 | Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted… Affected: 2.0 |
| CVE-2024-1485 | 9.3 | Feb 14 | A flaw was found in the decompression function of registry-support Affected: 4.0 |
| CVE-2013-4561 | 9.1 | Jun 30 | In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file Affected: All versions, or not specified |
| CVE-2014-0163 | 8.8 | Dec 11 | Openshift has shell command injection flaws due to unsanitized data being passed into shell commands Affected: 1.0; 2.0 |
| CVE-2018-1102 | 8.8 | Apr 30 | A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
| CVE-2016-5766 | 8.8 | Aug 7 | Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before… Affected: 2.0 |
| CVE-2016-3738 | 8.8 | Jun 8 | Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Docker socket and gain privileges via… Affected: 3.2 |
| CVE-2016-2160 | 8.8 | Jun 8 | Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder… Affected: 3.2 |
| CVE-2016-0792 | 8.8 | Apr 7 | Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file,… Affected: 3.1 |
| CVE-2015-7538 | 8.8 | Feb 3 | Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors Affected: through 3.1; 2.0 |
| CVE-2015-7537 | 8.8 | Feb 3 | Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests… Affected: through 3.1; 2.0 |
| CVE-2019-5736 | 8.6 | Feb 11 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by… Affected: 3.4; 3.5; 3.6; 3.7 |
| CVE-2026-35091 | 8.2 | Apr 1 | Corosync: corosync: denial of service and information disclosure via crafted udp packet Affected: 4.0 |
| CVE-2022-3262 | 8.1 | Dec 8 | A flaw was found in Openshift Affected: 4.9 |
| CVE-2021-4125 | 8.1 | Aug 24 | It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were… Affected: 4.6.0 before 4.6.52; 4.7.0 before 4.7.40; 4.8.0 before 4.8.24 |
| CVE-2013-2103 | 8.1 | Dec 3 | OpenShift cartridge allows remote URL retrieval Affected: 1.0 |
| CVE-2016-7075 | 8.1 | Sep 10 | It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields Affected: 3.1; 3.2; 3.3 |
| CVE-2019-19350 | 7.8 | Mar 24 | An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11 Affected: 3.11; 4.0 |
| CVE-2019-19349 | 7.8 | Mar 24 | An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4 Affected: 4.0 |
| CVE-2020-1709 | 7.8 | Mar 20 | A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the… Affected: 4.0 before 4.3; 3.11 |
| CVE-2019-19345 | 7.8 | Mar 20 | A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the… Affected: 4.0 before 4.3; 3.11 |
| CVE-2014-0023 | 7.8 | Nov 15 | OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution Affected: All versions, or not specified |
| CVE-2018-10875 | 7.8 | Jul 13 | A flaw was found in ansible Affected: 3.0 |
| CVE-2013-4364 | 7.8 | Jan 8 | (1) oo-analytics-export and (2) oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Enterprise 1 and 2 allow local users to have unspecified… Affected: 1.0; 2.0 |
| CVE-2016-8631 | 7.7 | Jul 31 | The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes Affected: 3.0; 3.3 |
| CVE-2026-35092 | 7.5 | Apr 1 | Corosync: corosync: denial of service via integer overflow in join message validation Affected: 4.0 |
| CVE-2024-12085 | 7.5 | Jan 14 | Rsync: info leak via uninitialized stack contents Affected: 5.0 |
| CVE-2013-4253 | 7.5 | Oct 19 | The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's authorized_keys file Affected: 1.0 |
| CVE-2021-4047 | 7.5 | Apr 11 | The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was missing Affected: 4.9 |
| CVE-2012-6685 | 7.5 | Feb 19 | Nokogiri before 1.5.4 is vulnerable to XXE attacks Affected: 2.0 |
| CVE-2012-6135 | 7.5 | Nov 19 | RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process Affected: 1.0 |
| CVE-2018-14645 | 7.5 | Sep 21 | A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2 Affected: 3.10 |
| CVE-2018-10885 | 7.5 | Jul 5 | In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash when using ovs-networkpolicy plugin Affected: before 3.10.9 |
| CVE-2016-5409 | 7.5 | Apr 20 | Red Hat OpenShift Enterprise 2 does not include the HTTPOnly flag in a Set-Cookie header for the GEARID cookie, which makes it easier for remote attackers to obtain potentially… Affected: 2.0 |
| CVE-2016-5418 | 7.5 | Sep 21 | The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a… Affected: 3.1; 3.2 |
| CVE-2015-7539 | 7.5 | Feb 3 | The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for… Affected: 2.0; 3.1 |
| CVE-2022-3259 | 7.4 | Dec 9 | Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks Affected: 4.9 |
| CVE-2016-3726 | 7.4 | May 17 | Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… Affected: 3.1; 3.2 |
| CVE-2013-0165 | 7.3 | Nov 1 | cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp Affected: All versions, or not specified |
| CVE-2018-1069 | 7.1 | Mar 9 | Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems Affected: 3.7 |
| CVE-2016-3708 | 7.1 | Jun 8 | Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods in other namespaces, allows remote… Affected: 3.2 |
| CVE-2021-3697 | 7.0 | Jul 6 | A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap Affected: 3.0 |