OC
Product
Openshift Container Platform For Power
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 8Low 0
Watch
Add Openshift Container Platform For Power to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3916 | 6.8 | Sep 20 | A flaw was found in the offline_access scope in Keycloak Affected: 4.9; 4.10 |
| CVE-2024-9676 | 6.5 | Oct 15 | Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) Affected: 4.12; 4.13; 4.14; 4.15; 4.16 |
| CVE-2024-4629 | 6.5 | Sep 3 | Keycloak: potential bypass of brute force protection Affected: 4.9; 4.10 |
| CVE-2024-1725 | 6.5 | Mar 7 | Kubevirt-csi: persistentvolume allows access to hcp's root node Affected: 4.13; 4.14; 4.15 |
| CVE-2023-0056 | 6.5 | Mar 23 | An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service Affected: 4.12; 4.10; 4.11; 4.12 |
| CVE-2024-8883 | 6.1 | Sep 19 | Keycloak: vulnerable redirect uri validation results in open redirec Affected: 4.9; 4.10 |
| CVE-2022-4361 | 6.1 | Jul 7 | Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers Affected: 4.9; 4.10 |
| CVE-2023-6134 | 5.4 | Dec 14 | Keycloak: reflected xss via wildcard in oidc redirect_uri Affected: 4.9; 4.10 |
Showing 8