OP
Product
Openshift
On CISA KEVExploited in the wild
145
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 47Medium 42Low 5
Watch
Add Openshift to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7517 | 3.5 | Oct 17 | An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift Affected: 3.0 |
| CVE-2016-8651 | 3.5 | Aug 1 | An input validation flaw was found in the way OpenShift 3 handles requests for images Affected: 3.0 |
| CVE-2015-0238 | 3.3 | Sep 26 | selinux-policy as packaged in Red Hat OpenShift 2 allows attackers to obtain process listing information via a privilege escalation attack Affected: 2.0 |
| CVE-2016-3711 | 3.3 | Jun 8 | HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFT_[namespace]_SERVERID"… Affected: 3.2 |
| CVE-2015-7561 | 3.1 | Aug 7 | Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image Affected: 3.0 |
Showing 5