OP
Product
Openshift
On CISA KEVExploited in the wild
145
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 47Medium 42Low 5
Watch
Add Openshift to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0234 | 9.8 | Feb 12 | The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the… Affected: before 2.1 |
| CVE-2013-2060 | 9.8 | Jan 28 | The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart Affected: 1.0 |
| CVE-2014-0175 | 9.8 | Dec 13 | mcollective has a default password set at install Affected: 1.0; 2.1 |
| CVE-2015-7501 | 9.8 | Nov 9 | Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x;… Affected: 3.0 |
| CVE-2016-2074 | 9.8 | Jul 3 | Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted… Affected: 3.1 |
| CVE-2016-0791 | 9.8 | Apr 7 | Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection… Affected: 3.1 |
| CVE-2016-0788 | 9.8 | Apr 7 | The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener Affected: 3.1 |
| CVE-2015-5254 | 9.8 | Jan 8 | Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted… Affected: 2.0 |
| CVE-2024-1485 | 9.3 | Feb 14 | A flaw was found in the decompression function of registry-support Affected: 4.0 |
| CVE-2013-4561 | 9.1 | Jun 30 | In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file Affected: All versions, or not specified |
Showing 10