What’s Vulnerable › Products
RedHat Openshift Container Platform For Power vulnerabilities
23 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your RedHat Openshift Container Platform For Power version is affected
Exploited RedHat Openshift Container Platform For Power vulnerabilities
- CVE-2019-0211 — Apache HTTP Server Privilege Escalation Vulnerability
Latest RedHat Openshift Container Platform For Power vulnerabilities
- CVE-2026-4424 — Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing (CVSS 7.5)
- CVE-2025-13601 — Glib: integer overflow in in g_escape_uri_string() (CVSS 7.7)
- CVE-2025-6021 — Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 (CVSS 7.5)
- CVE-2024-9676 — Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) (CVSS 6.5)
- CVE-2024-8883 — Keycloak: vulnerable redirect uri validation results in open redirec (CVSS 6.1)
- CVE-2024-4629 — Keycloak: potential bypass of brute force protection (CVSS 6.5)
- CVE-2024-1132 — Keycloak: path transversal in redirection validation (CVSS 8.1)
- CVE-2024-1725 — Kubevirt-csi: persistentvolume allows access to hcp's root node (CVSS 6.5)
- CVE-2024-1635 — Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol (CVSS 7.5)
- CVE-2023-6291 — Keycloak: redirect_uri validation bypass (CVSS 7.1)
- CVE-2023-2585 — Keycloak: client access via device auth request spoof (CVSS 8.1)
- CVE-2023-6134 — Keycloak: reflected xss via wildcard in oidc redirect_uri (CVSS 5.4)
- CVE-2023-6563 — Keycloak: offline session token dos (CVSS 7.7)
- CVE-2023-5625 — Python-eventlet: patch regression for cve-2021-21419 in some red hat builds (CVSS 7.5)
- CVE-2023-3223 — Undertow: outofmemoryerror due to @multipartconfig handling (CVSS 7.5)
- CVE-2022-4318 — Cri-o: /etc/passwd tampering privesc (CVSS 7.8)
- CVE-2022-4039 — Rhsso-container-image: unsecured management interface exposed to adjecent network (CVSS 9.8)
- CVE-2022-3916 — Keycloak: session takeover with oidc offline refreshtokens (CVSS 6.8)
- CVE-2023-1108 — Undertow: infinite loop in sslconduit during close (CVSS 7.5)
- CVE-2022-4361 — (CVSS 6.1)
- CVE-2023-3089 — Ocp & fips mode (CVSS 7.5)
- CVE-2023-0056 — (CVSS 6.5)
- CVE-2019-0211 — Apache HTTP Server Privilege Escalation Vulnerability (CVSS 7.8) — exploited