Red Hat OpenShift Container Platform <4.13.4

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical18high19medium0low

updated 2026-10-27

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-25136US	medium6.5	89.8% (100th)	Exploit	no fix	2023-02-03	—
CVE-2022-3358US	high7.5	4.01% (90th)	Exploit	no fix	2022-10-11	—
CVE-2020-16251US	high8.2	2.83% (87th)	—	no fix	2020-08-26	—
CVE-2022-2309US	high7.5	2.45% (84th)	—	no fix	2022-07-05	—
CVE-2023-27534US	high8.8	2.44% (84th)	—	no fix	2023-03-30	—
CVE-2023-27533US	high8.8	2.16% (82nd)	—	no fix	2023-03-30	—
CVE-2022-32190US	high7.5	2.15% (82nd)	—	no fix	2022-09-13	—
CVE-2023-27537US	medium5.9	1.90% (80th)	—	no fix	2023-03-30	—
CVE-2022-26280US	medium6.5	1.88% (79th)	—	no fix	2022-03-28	—
CVE-2023-0401US	high7.5	1.85% (79th)	—	no fix	2023-02-08	—
CVE-2023-0217US	high7.5	1.85% (79th)	—	no fix	2023-02-08	—
CVE-2023-0216US	high7.5	1.85% (79th)	—	no fix	2023-02-08	—
CVE-2023-27535US	medium5.9	1.80% (78th)	—	no fix	2023-03-30	—
CVE-2021-3765US	high7.5	1.78% (78th)	—	no fix	2021-11-02	—
CVE-2023-27536US	medium5.9	1.76% (78th)	—	no fix	2023-03-30	—
CVE-2022-1348US	medium6.5	1.68% (77th)	—	no fix	2022-05-25	—
CVE-2020-16250US	high8.2OT elevated	1.51% (74th)	—	no fix	2020-08-26	—
CVE-2022-1304US	high7.8	1.47% (74th)	—	no fix	2022-04-14	—
CVE-2023-27538US	medium5.5	1.45% (73rd)	—	no fix	2023-03-30	—
CVE-2021-4238US	critical9.1	1.41% (72nd)	—	no fix	2022-12-27	—
CVE-2022-4203US	medium4.9	1.39% (72nd)	—	no fix	2023-02-24	—
CVE-2022-0670US	critical9.1OT elevated	1.28% (70th)	—	no fix	2022-07-25	—
CVE-2021-43519US	medium5.5	1.23% (69th)	—	no fix	2021-11-09	—
CVE-2021-4231US	medium5.4	1.18% (68th)	—	no fix	2022-05-26	—
CVE-2021-43998US	medium6.5	1.04% (64th)	—	no fix	2021-11-30	—
CVE-2021-44964US	medium6.3	0.98% (62nd)	—	no fix	2022-03-14	—
CVE-2022-38149US	high7.5	0.85% (58th)	—	no fix	2022-08-17	—
CVE-2022-23541US	medium6.3	0.81% (57th)	—	no fix	2022-12-22	—
CVE-2023-24999US	high8.1OT elevated	0.60% (48th)	—	no fix	2023-03-11	—
CVE-2022-23540US	high7.6OT elevated	0.57% (47th)	—	no fix	2022-12-22	—
CVE-2022-41316US	medium5.3	0.52% (44th)	—	no fix	2022-10-12	—
CVE-2023-2491US	high7.8	0.46% (40th)	—	no fix	2023-05-17	—
CVE-2021-4235US	medium5.5	0.43% (37th)	—	no fix	2022-12-27	—
CVE-2022-3715US	high7.8	0.38% (32nd)	—	no fix	2023-01-05	—
CVE-2023-0620US	medium6.7	0.38% (32nd)	—	no fix	2023-03-30	—
CVE-2023-0665US	medium6.5	0.33% (26th)	—	no fix	2023-03-30	—
CVE-2022-45873US	medium5.5	0.27% (18th)	—	no fix	2022-11-23	—
CVE-2022-47024US	high7.8	0.26% (18th)	—	no fix	2023-01-20	—
CVE-2023-25000US	medium4.7	0.21% (11th)	—	no fix	2023-03-30	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference7 CVEs
CWE-287Improper Authentication6 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-305Authentication Bypass by Primary Weakness3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-415Double Free2 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan