Red Hat OpenShift logging

productDE

cpe:/a:redhat:openshift:logging

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical10high5medium0low

updated 2026-10-28

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-27145US	—	0.59% (48th)	Exploit	no fix	2026-06-02	—
CVE-2026-46595US	—OT elevated	0.56% (46th)	Exploit	no fix	2026-05-22	—
CVE-2026-42508US	—	6.91% (94th)	—	no fix	2026-05-22	—
CVE-2026-39821US	—	1.83% (79th)	—	no fix	2026-05-22	—
CVE-2021-35065US	high7.5	1.70% (77th)	—	no fix	2022-12-26	—
CVE-2026-33811US	high7.5	0.88% (59th)	—	no fix	2026-05-07	—
CVE-2026-33814US	high7.5	0.84% (58th)	—	no fix	2026-05-07	—
CVE-2026-42499US	—	0.80% (56th)	—	no fix	2026-05-07	—
CVE-2026-39820US	high7.5	0.78% (56th)	—	no fix	2026-05-07	—
CVE-2026-39832US	—	0.68% (52nd)	—	no fix	2026-05-22	—
CVE-2026-39830US	—	0.68% (52nd)	—	no fix	2026-05-22	—
CVE-2026-27140US	high8.8OT elevated	0.66% (51st)	—	no fix	2026-04-08	—
CVE-2026-39836US	high7.5	0.63% (50th)	—	no fix	2026-05-07	—
CVE-2026-32283US	high7.5	0.62% (50th)	—	no fix	2026-04-08	—
CVE-2026-32280US	—	0.61% (49th)	—	no fix	2026-04-08	—
CVE-2026-39834US	—	0.60% (48th)	—	no fix	2026-05-22	—
CVE-2026-42504US	—	0.56% (46th)	—	no fix	2026-06-02	—
CVE-2026-27143US	critical9.8	0.54% (45th)	—	no fix	2026-04-08	—
CVE-2026-39835US	—	0.50% (43rd)	—	no fix	2026-05-22	—
CVE-2026-39831US	—OT elevated	0.48% (41st)	—	no fix	2026-05-22	—
CVE-2026-46597US	—	0.47% (41st)	—	no fix	2026-05-22	—
CVE-2026-39833US	—OT elevated	0.47% (40th)	—	no fix	2026-05-22	—
CVE-2026-39829US	—	0.47% (40th)	—	no fix	2026-05-22	—
CVE-2026-46598US	—	0.41% (35th)	—	no fix	2026-05-22	—
CVE-2026-39825US	—	0.39% (33rd)	—	no fix	2026-05-07	—
CVE-2026-42500US	—	0.38% (32nd)	—	no fix	2026-05-29	—
CVE-2026-39826US	—	0.37% (31st)	—	no fix	2026-05-07	—
CVE-2026-42507US	—	0.37% (31st)	—	no fix	2026-06-02	—
CVE-2026-39828US	—	0.37% (31st)	—	no fix	2026-05-22	—
CVE-2026-32281US	high7.5	0.36% (29th)	—	no fix	2026-04-08	—
CVE-2026-33810US	high8.2	0.34% (27th)	—	no fix	2026-04-08	—
CVE-2026-33809US	—	0.33% (27th)	—	no fix	2026-03-25	—
CVE-2026-25680US	—	0.33% (26th)	—	no fix	2026-05-22	—
CVE-2026-39823US	—	0.31% (24th)	—	no fix	2026-05-07	—
CVE-2026-32282US	medium6.4	0.29% (22nd)	—	no fix	2026-04-08	—
CVE-2026-32289US	medium6.1	0.29% (21st)	—	no fix	2026-04-08	—
CVE-2026-32288US	medium5.5	0.29% (21st)	—	no fix	2026-04-08	—
CVE-2026-39827US	—	0.28% (20th)	—	no fix	2026-05-22	—
CVE-2026-27144US	high7.1	0.26% (18th)	—	no fix	2026-04-08	—
CVE-2026-42506US	—	0.24% (14th)	—	no fix	2026-05-22	—
CVE-2026-42501US	—	0.23% (14th)	—	no fix	2026-05-07	—
CVE-2026-42502US	—	0.22% (13th)	—	no fix	2026-05-22	—
CVE-2026-27136US	—	0.22% (13th)	—	no fix	2026-05-22	—
CVE-2026-25681US	—	0.22% (13th)	—	no fix	2026-05-22	—
CVE-2026-39819US	medium5.3	0.18% (7th)	—	no fix	2026-05-07	—
CVE-2026-39817US	medium5.9	0.17% (6th)	—	no fix	2026-05-07	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-295Improper Certificate Validation5 CVEs
CWE-770Allocation of Resources Without Limits or Throttling5 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-606Unchecked Input for Loop Condition3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-1289Improper Validation of Unsafe Equivalence in Input2 CVEs
CWE-281Improper Preservation of Permissions2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)46 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan