Skip to content

Vulnerabilities of n/a Openshift

Is your version affected?

CVE Summary Score Published
CVE-2022-4145 A content spoofing flaw was found in OpenShift's OAuth endpoint 4.3 Medium Oct 5, 2023
CVE-2023-3089 A compliance problem was found in the Red Hat OpenShift Container Platform 7.0 High Jul 5, 2023
CVE-2022-3259 Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks 7.4 High Dec 9, 2022
CVE-2022-3262 A flaw was found in Openshift 8.1 High Dec 8, 2022
CVE-2022-3260 The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack 4.8 Medium Dec 8, 2022
CVE-2022-2403 A credentials leak was found in the OpenShift Container Platform Not rated Sep 1, 2022
CVE-2022-1677 In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a… Not rated Sep 1, 2022
CVE-2022-1632 An Improper Certificate Validation attack was found in Openshift Not rated Sep 1, 2022
CVE-2021-4047 The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was… Not rated Apr 11, 2022
CVE-2021-3636 It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly… Not rated Jul 30, 2021
CVE-2020-14336 A flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to craft custom network… Not rated Jun 2, 2021
CVE-2021-20182 A privilege escalation flaw was found in openshift4/ose-docker-builder Not rated Feb 23, 2021

Other n/a products