OC
Product
Openshift Container Platform
On CISA KEVExploited in the wild
338
CVEs
7
On KEV
10.0
Max CVSS
10
New 30D
Severity mix
Critical 39High 141Medium 148Low 10
Watch
Add Openshift Container Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3832 | 3.7 | Apr 30 | Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response Affected: 4.0 |
| CVE-2026-0989 | 3.7 | Jan 15 | Libxml2: unbounded relaxng include recursion leading to stack overflow Affected: 4.0 |
| CVE-2025-8283 | 3.7 | Jul 28 | A vulnerability was found in the netavark package, a network stack for containers used with Podman Affected: 4.0 |
| CVE-2021-20238 | 3.7 | Apr 1 | It was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accessed externally from clusters without authentication Affected: 4.0 |
| CVE-2016-8651 | 3.5 | Aug 1 | An input validation flaw was found in the way OpenShift 3 handles requests for images Affected: 3.1; 3.2; 3.3 |
| CVE-2026-68744 | 3.3 | Aug 4 | Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply Affected: 4.0 |
| CVE-2019-3815 | 3.3 | Jan 28 | A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux Affected: 3.11 |
| CVE-2026-0992 | 2.9 | Jan 15 | Libxml2: libxml2: denial of service via crafted xml catalogs Affected: 4.0 |
| CVE-2025-6170 | 2.5 | Jun 16 | Libxml2: stack buffer overflow in xmllint interactive shell command handling Affected: 4.0 |
| CVE-2019-10165 | 2.3 | Jul 30 | OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server Affected: before 4.1.3 |
Showing 10