Red Hat OpenShift Container Platform <4.14.38

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical35high74medium2low

updated 2026-10-27

vulnerabilities (141)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-1086US	high7.8OT critical	28.1% (98th)	KEV	no fix	2024-01-31	—
CVE-2024-36971US	high7.8OT critical	2.70% (86th)	KEV	no fix	2024-06-10	—
CVE-2023-50387US	high7.5	100.0% (100th)	Exploit	no fix	2024-02-14	—
CVE-2024-3177US	—	2.22% (83rd)	Exploit	no fix	2024-04-22	—
CVE-2023-6546US	high7.0	0.73% (54th)	Exploit	no fix	2023-12-21	—
CVE-2023-6931US	high7.0	0.71% (54th)	Exploit	no fix	2023-12-19	—
CVE-2023-45857US	medium6.5	0.71% (53rd)	Exploit	no fix	2023-11-08	—
CVE-2023-43786US	medium5.5	0.47% (41st)	Exploit	no fix	2023-10-10	—
CVE-2024-6409US	—	27.9% (98th)	—	no fix	2024-07-08	—
CVE-2024-2201US	—	8.79% (95th)	—	no fix	2024-12-19	—
CVE-2023-3446US	medium5.3	6.53% (94th)	—	no fix	2023-07-19	—
CVE-2023-38546US	low3.7	5.96% (93rd)	—	no fix	2023-10-18	—
CVE-2018-15209US	high8.8	3.92% (90th)	—	no fix	2018-08-08	—
CVE-2021-25220US	medium4.0	3.48% (89th)	—	no fix	2022-03-23	—
CVE-2024-0727US	medium5.5	3.19% (88th)	—	no fix	2024-01-26	—
CVE-2023-3817US	medium5.3	3.05% (87th)	—	no fix	2023-07-31	—
CVE-2024-28176US	medium5.9	2.10% (82nd)	—	no fix	2024-03-09	—
CVE-2024-0565US	high7.4	2.00% (81st)	—	no fix	2024-01-15	—
CVE-2024-28180US	—	1.96% (80th)	—	no fix	2024-03-09	—
CVE-2023-6121US	medium4.3	1.64% (76th)	—	no fix	2023-11-16	—
CVE-2023-45142US	high7.5	1.61% (76th)	—	no fix	2023-10-12	—
CVE-2023-40745US	medium6.5	1.41% (73rd)	—	no fix	2023-10-05	—
CVE-2023-4408US	—	1.39% (72nd)	—	no fix	2024-02-13	—
CVE-2024-21011US	—	1.37% (72nd)	—	no fix	2024-04-16	—
CVE-2021-47548US	—	1.36% (72nd)	—	no fix	2024-05-24	—
CVE-2024-21068US	—	1.30% (70th)	—	no fix	2024-04-16	—
CVE-2023-24023US	medium6.8	1.30% (70th)	—	no fix	2023-11-28	—
CVE-2023-41175US	medium6.5	1.29% (70th)	—	no fix	2023-10-05	—
CVE-2024-21085US	—	1.29% (70th)	—	no fix	2024-04-16	—
CVE-2024-3727US	—	1.28% (70th)	—	no fix	2024-05-14	—
CVE-2023-45287US	high7.5	1.25% (69th)	—	no fix	2023-12-05	—
CVE-2023-3618US	medium6.5	1.19% (68th)	—	no fix	2023-07-12	—
CVE-2023-26364US	—	1.15% (67th)	—	no fix	2023-11-17	—
CVE-2024-22189US	—	1.11% (66th)	—	no fix	2024-04-04	—
CVE-2022-48624US	high7.8	1.06% (64th)	—	no fix	2024-02-19	—
CVE-2023-25775US	critical9.8	1.05% (64th)	—	no fix	2023-08-11	—
CVE-2024-24784US	—	1.05% (64th)	—	no fix	2024-03-05	—
CVE-2023-52434US	high8.0	1.02% (63rd)	—	no fix	2024-02-20	—
CVE-2024-24788US	—	1.00% (63rd)	—	no fix	2024-05-08	—
CVE-2023-37788US	high7.5	0.98% (62nd)	—	no fix	2023-07-18	—
CVE-2023-6240US	medium6.5OT elevated	0.97% (62nd)	—	no fix	2024-02-04	—
CVE-2022-40090US	medium6.5	0.95% (61st)	—	no fix	2023-08-22	—
CVE-2022-48747US	—	0.92% (60th)	—	no fix	2024-06-20	—
CVE-2024-21012US	—OT elevated	0.91% (60th)	—	no fix	2024-04-16	—
CVE-2020-26555US	medium5.4OT elevated	0.88% (59th)	—	no fix	2021-05-24	—
CVE-2023-6476US	high7.5	0.86% (58th)	—	no fix	2024-01-09	—
CVE-2021-29390US	high7.1	0.82% (57th)	—	no fix	2023-08-22	—
CVE-2023-26159US	medium6.1	0.80% (56th)	—	no fix	2024-01-02	—
CVE-2024-24785US	—	0.80% (56th)	—	no fix	2024-03-05	—
CVE-2023-28866US	medium5.3	0.77% (56th)	—	no fix	2023-03-27	—

showing 50 of 141

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation21 CVEs
CWE-125Out-of-bounds Read20 CVEs
CWE-416Use After Free16 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')14 CVEs
CWE-476NULL Pointer Dereference14 CVEs
CWE-400Uncontrolled Resource Consumption12 CVEs
CWE-787Out-of-bounds Write11 CVEs
CWE-770Allocation of Resources Without Limits or Throttling8 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)141 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan