Product by Red Hat
Openshift Container Platform For Linuxone
17 known vulnerabilities in Openshift Container Platform For Linuxone (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1635 | Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol | 7.5 | |
| High | CVE-2020-8945 | Gpgme: Use-After-Free | 7.5 | |
| High | CVE-2024-1132 | Keycloak: path transversal in redirection validation | 8.1 | |
| Medium | CVE-2024-8883 | Keycloak: vulnerable redirect uri validation results in open redirec | 6.1 | |
| High | CVE-2023-1108 | Undertow: infinite loop in sslconduit during close | 7.5 | |
| High | CVE-2025-6021 | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 | 7.5 | |
| Medium | CVE-2024-9676 | Containers/storage: Path Traversal | 6.5 | |
| High | CVE-2025-13601 | Glib: integer overflow in in g_escape_uri_string() | 7.7 | |
| High | CVE-2022-4318 | Cri-o: /etc/passwd tampering privesc | 7.8 | |
| High | CVE-2023-6291 | Keycloak: redirect_uri validation bypass | 7.1 | |
| Critical | CVE-2022-4039 | Rhsso-container-image: unsecured management interface exposed to adjecent network | 8.0 | |
| Medium | CVE-2022-3916 | Keycloak: session takeover with oidc offline refreshtokens | 6.8 | |
| Medium | CVE-2024-4629 | Keycloak: potential bypass of brute force protection | 6.5 | |
| High | CVE-2023-5625 | Python-eventlet: patch regression for cve-2021-21419 in some red hat builds | 5.3 | |
| Medium | CVE-2024-1725 | Kubevirt-csi: persistentvolume allows access to hcp's root node | 6.5 | |
| High | CVE-2023-3089 | Ocp & fips mode | 7.0 | |
| High | CVE-2023-2585 | Keycloak: client access via device auth request spoof | 3.5 |