Advisories · Technology
openshift.
Every CVE that names openshift among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Content spoofing
- openshift
- Red Hat OpenShift Container Platform 4
- Other injection
- CVSS 7.0 High
Ocp & fips mode
- openshift
- Red Hat OpenShift Serverless
- CWE-693
- CVSS 7.4 High
OpenShift: Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow…
- OpenShift
- CWE-665
- CVSS 8.1 High
A flaw was found in Openshift.
- openshift
- CWE-453
- CWE-1188
- CVSS 4.8 Medium
Clickjacking in Openshift
- Openshift
- CWE-1021
-
A credentials leak was found in the OpenShift Container Platform.
- Openshift
- Information disclosure
-
Uncontrolled resource consumption in Openshift
- Openshift
- Denial of service
-
Improper certificate validation in Openshift
- Openshift
- Weak cryptography or TLS
-
Improper input validation in OpenShift
- OpenShift
- CWE-20
-
Improper certificate validation in openshift
- openshift
- Weak cryptography or TLS
-
Resource allocation without limits in Openshift
- Openshift
- Denial of service
-
Files accessible to external parties in openshift
- openshift
- Information disclosure
-
Openshift: Openshift has shell command injection flaws due to unsanitized data being passed into…
- Openshift
-
OpenShift: OpenShift: Install script has temporary file creation vulnerability which can result in…
- OpenShift
- CVSS 4.3 Medium
openshift: openshift before versions 3.3.1.11, 3.2.1.23…
- openshift
- CWE-460