Product by Red Hat
Openshift Container Platform For Power
23 known vulnerabilities in Openshift Container Platform For Power (Red Hat), 1 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-0211 | Apache HTTP Server Privilege Escalation Vulnerability In CISA KEValso in 27 other products | 7.8 | |
| High | CVE-2024-1635 | Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol | 7.5 | |
| High | CVE-2023-3223 | Undertow: outofmemoryerror due to @multipartconfig handling | 7.5 | |
| High | CVE-2026-4424 | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing | 7.5 | |
| High | CVE-2024-1132 | Keycloak: path transversal in redirection validation | 8.1 | |
| Medium | CVE-2024-8883 | Keycloak: vulnerable redirect uri validation results in open redirec | 6.1 | |
| High | CVE-2023-1108 | Undertow: infinite loop in sslconduit during close | 7.5 | |
| High | CVE-2025-6021 | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 | 7.5 | |
| Medium | CVE-2023-0056 | HAProxy: Uncontrolled Resource Consumption | 6.5 | |
| High | CVE-2023-6563 | Keycloak: offline session token dos | 7.7 | |
| Medium | CVE-2024-9676 | Containers/storage: Path Traversal | 6.5 | |
| Critical | CVE-2022-4361 | Red Hat Build of Keycloak: Improper Neutralization of Script in an Error Message Web Page | 10.0 | |
| High | CVE-2025-13601 | Glib: integer overflow in in g_escape_uri_string() | 7.7 | |
| High | CVE-2022-4318 | Cri-o: /etc/passwd tampering privesc | 7.8 | |
| High | CVE-2023-6291 | Keycloak: redirect_uri validation bypass | 7.1 | |
| Critical | CVE-2022-4039 | Rhsso-container-image: unsecured management interface exposed to adjecent network | 8.0 | |
| Medium | CVE-2022-3916 | Keycloak: session takeover with oidc offline refreshtokens | 6.8 | |
| Medium | CVE-2023-6134 | Keycloak: reflected xss via wildcard in oidc redirect_uri | 4.6 | |
| Medium | CVE-2024-4629 | Keycloak: potential bypass of brute force protection | 6.5 | |
| High | CVE-2023-5625 | Python-eventlet: patch regression for cve-2021-21419 in some red hat builds | 5.3 | |
| Medium | CVE-2024-1725 | Kubevirt-csi: persistentvolume allows access to hcp's root node | 6.5 | |
| High | CVE-2023-3089 | Ocp & fips mode | 7.0 | |
| High | CVE-2023-2585 | Keycloak: client access via device auth request spoof | 3.5 |