Red Hat OpenShift

Name: Red Hat OpenShift
Brand: Red Hat

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

38critical351high674medium13low

updated 2026-10-27

vulnerabilities (1,479)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-31431US	—OT critical	98.1% (100th)	KEV	no fix	2026-04-22	≤ Container Platform <4.15.64
CVE-2025-32463US	high7.8OT critical	55.5% (99th)	KEV	no fix	2025-06-30	3 versions
CVE-2024-1086US	high7.8OT critical	28.1% (98th)	KEV	no fix	2024-01-31	8 versions
CVE-2023-28205US	high8.8OT critical	27.1% (98th)	KEV	no fix	2023-04-10	≤ Container Platform <4.14.0
CVE-2025-48384US	—OT critical	4.38% (91st)	KEV	no fix	2025-07-08	4 versions
CVE-2024-53104US	high7.8OT critical	3.40% (89th)	KEV	no fix	2024-12-02	5 versions
CVE-2024-36971US	high7.8OT critical	2.70% (86th)	KEV	no fix	2024-06-10	8 versions
CVE-2024-53197US	—OT critical	4.12% (91st)	KEV	no fix	2024-12-27	4 versions
CVE-2024-53150US	high7.1OT critical	1.35% (71st)	KEV	no fix	2024-12-24	5 versions
CVE-2024-50302US	medium5.5OT critical	0.81% (57th)	KEV	no fix	2024-11-19	5 versions
CVE-2023-50387US	high7.5	100.0% (100th)	Exploit	no fix	2024-02-14	8 versions
CVE-2023-45288US	—	92.0% (100th)	Exploit	no fix	2024-04-04	4 versions
CVE-2024-27316US	high7.5	91.3% (100th)	Exploit	no fix	2024-04-04	4 versions
CVE-2023-25136US	medium6.5	89.8% (100th)	Exploit	no fix	2023-02-03	7 versions
CVE-2024-30255US	high7.5	87.8% (100th)	Exploit	no fix	2024-04-04	4 versions
CVE-2007-4559US	medium6.8	27.1% (98th)	Exploit	no fix	2007-08-28	≤ Data Foundation <4.12.10
CVE-2021-23337US	high7.2	21.3% (98th)	Exploit	no fix	2021-02-15	2 versions
CVE-2026-4480US	—	13.9% (97th)	Exploit	no fix	2026-05-26	4 versions
CVE-2022-24785US	high7.5	13.8% (97th)	Exploit	no fix	2022-04-04	2 versions
CVE-2026-46300US	high7.8	10.2% (96th)	Exploit	4.21.19	2026-05-23	4 versions
CVE-2022-41966US	high7.5	9.35% (95th)	Exploit	no fix	2022-12-28	≤ Container Platform <4.10.62
CVE-2026-34040US	high7.8OT elevated	9.11% (95th)	Exploit	no fix	2026-03-31	≤ Service Mesh <3.1.7
CVE-2024-21534US	—	9.02% (95th)	Exploit	no fix	2024-10-11	2 versions
CVE-2024-12085US	—	8.64% (95th)	Exploit	5.9.11	2025-01-14	12 versions
CVE-2024-29415US	—	8.28% (95th)	Exploit	no fix	2024-05-27	2 versions
CVE-2022-40146US	high7.5	7.43% (94th)	Exploit	no fix	2022-09-22	≤ Container Platform <4.10.62
CVE-2025-11187US	—	5.23% (92nd)	Exploit	no fix	2026-01-27	6 versions
CVE-2022-41853US	critical9.8	5.15% (92nd)	Exploit	no fix	2022-10-06	≤ Container Platform <4.10.62
CVE-2022-3358US	high7.5	4.01% (90th)	Exploit	no fix	2022-10-11	7 versions
CVE-2020-24370US	medium5.3	3.83% (90th)	Exploit	no fix	2020-08-17	≤ Data Foundation <4.12.10
CVE-2023-20860US	high7.5	3.51% (89th)	Exploit	no fix	2023-03-27	≤ Container Platform <4.10.62
CVE-2024-23653US	critical9.8OT high	3.45% (89th)	Exploit	no fix	2024-01-31	8 versions
CVE-2024-45337US	—	3.18% (88th)	Exploit	5.8.20	2024-12-12	9 versions
CVE-2023-32681US	medium6.1	2.97% (87th)	Exploit	no fix	2023-05-26	≤ Container Platform <4.14.0
CVE-2026-4408US	critical9.8	2.50% (85th)	Exploit	no fix	2026-05-28	4 versions
CVE-2024-23652US	critical9.1	2.46% (84th)	Exploit	no fix	2024-01-31	8 versions
CVE-2022-0155US	medium6.5	2.43% (84th)	Exploit	no fix	2022-01-10	2 versions
CVE-2024-3177US	—	2.22% (83rd)	Exploit	4.16.24	2024-04-22	9 versions
CVE-2022-37032US	critical9.1	2.21% (83rd)	Exploit	no fix	2022-09-19	≤ Container Platform <4.14.0
CVE-2023-47108US	high7.5	2.03% (81st)	Exploit	no fix	2023-11-10	7 versions
CVE-2025-13465US	medium5.3	1.82% (79th)	Exploit	no fix	2026-01-21	7 versions
CVE-2024-45490US	high7.5	1.69% (77th)	Exploit	no fix	2024-08-30	≤ Container Platform <4.17.5
CVE-2026-33186US	—	1.58% (75th)	Exploit	no fix	2026-03-20	17 versions
CVE-2025-12548US	—OT elevated	1.30% (70th)	Exploit	no fix	2026-01-13	3 versions
CVE-2025-31133US	high7.8	1.24% (69th)	Exploit	no fix	2025-11-06	3 versions
CVE-2024-48910US	critical9.8	1.15% (67th)	Exploit	no fix	2024-10-31	3 versions
CVE-2024-50602US	—	1.12% (66th)	Exploit	no fix	2024-10-27	≤ Logging <5.9.10
CVE-2022-34302US	medium6.7OT elevated	1.09% (65th)	Exploit	no fix	2022-08-26	≤ Container Platform <4.14.0
CVE-2022-34301US	medium6.7OT elevated	0.99% (62nd)	Exploit	no fix	2022-08-26	≤ Container Platform <4.14.0
CVE-2026-22807US	critical9.8	0.98% (62nd)	Exploit	no fix	2026-01-21	≤ AI <3.4.0-ea.1

showing 50 of 1,479

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation200 CVEs
CWE-476NULL Pointer Dereference167 CVEs
CWE-416Use After Free155 CVEs
CWE-787Out-of-bounds Write110 CVEs
CWE-125Out-of-bounds Read105 CVEs
CWE-401Missing Release of Memory after Effective Lifetime71 CVEs
CWE-400Uncontrolled Resource Consumption65 CVEs
CWE-770Allocation of Resources Without Limits or Throttling56 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)1,472 CVEs
EUEU Vulnerability Database (ENISA)7 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan