Openshift vulnerabilities

146 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Exploited Openshift vulnerabilities

CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
CVE-2015-5317 — Jenkins User Interface (UI) Information Disclosure Vulnerability

CVE-2026-35092 — Corosync: corosync: denial of service via integer overflow in join message validation (CVSS 7.5)
CVE-2026-35091 — Corosync: corosync: denial of service and information disclosure via crafted udp packet (CVSS 8.2)
CVE-2025-14512 — Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow (CVSS 6.5)
CVE-2024-45777 — Grub2: grub-core/gettext: integer overflow leads to heap oob write. (CVSS 6.7)
CVE-2024-12085 — Rsync: info leak via uninitialized stack contents (CVSS 7.5)
CVE-2024-1485 — Registry-support: decompress can delete files outside scope via relative paths (CVSS 9.3)
CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
CVE-2023-0229 — (CVSS 6.3)
CVE-2023-0296 — (CVSS 5.3)
CVE-2022-3259 — (CVSS 7.4)
CVE-2022-3262 — (CVSS 8.1)
CVE-2022-3260 — (CVSS 4.8)
CVE-2013-4281 — (CVSS 5.5)
CVE-2013-4253 — (CVSS 7.5)
CVE-2017-7517 — (CVSS 3.5)
CVE-2022-2403 — (CVSS 6.5)
CVE-2021-4125 — (CVSS 8.1)
CVE-2021-3697 — (CVSS 7.0)
CVE-2021-3696 — (CVSS 4.5)
CVE-2021-3695 — (CVSS 4.5)
CVE-2013-4561 — (CVSS 9.1)
CVE-2021-4047 — (CVSS 7.5)
CVE-2021-3636 — (CVSS 4.6)
CVE-2020-35514 — (CVSS 7.0)
CVE-2020-1761 — (CVSS 6.1)