Openshift Container Platform For Power (Redhat) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2026-03-19. Vendor: Redhat.

CVEs of Openshift Container Platform For Power

CVE-2026-4424 - CVSS 7.5 (high), 2026-03-19: A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS…
CVE-2025-13601 - CVSS 7.7 (high), 2025-11-26: A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to…
CVE-2025-6021 - CVSS 7.5 (high), 2025-06-12: A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This…
CVE-2024-9676 - CVSS 6.5 (medium), 2024-10-15: A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and…
CVE-2024-8883 - CVSS 6.1 (medium), 2024-09-19: A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to…
CVE-2024-4629 - CVSS 6.5 (medium), 2024-09-03: A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the timing of login attempts. By initiating…
CVE-2024-1132 - CVSS 8.1 (high), 2024-04-17: A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious…
CVE-2024-1725 - CVSS 6.5 (medium), 2024-03-07: A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to…
CVE-2024-1635 - CVSS 7.5 (high), 2024-02-19: A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and…
CVE-2023-6291 - CVSS 7.1 (high), 2024-01-26: A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack…
CVE-2023-2585 - CVSS 8.1 (high), 2023-12-21: Keycloak's device authorization grant does not correctly validate the device code and client ID. An attacker client could abuse the missing validation to…
CVE-2023-6134 - CVSS 5.4 (medium), 2023-12-14: A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an…
CVE-2023-6563 - CVSS 7.7 (high), 2023-12-14: An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (>…
CVE-2023-5625 - CVSS 7.5 (high), 2023-11-01: A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419…
CVE-2023-3223 - CVSS 7.5 (high), 2023-09-27: A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow…
CVE-2022-4318 - CVSS 7.8 (high), 2023-09-25: A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
CVE-2022-4039 - CVSS 9.8 (critical), 2023-09-22: A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw…
CVE-2022-3916 - CVSS 6.8 (medium), 2023-09-20: A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due…
CVE-2023-1108 - CVSS 7.5 (high), 2023-09-14: A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the…
CVE-2022-4361 - CVSS 10 (critical), 2023-07-07: Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The…
CVE-2023-3089 - CVSS 7.5 (high), 2023-07-05: A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic…
CVE-2023-0056 - CVSS 6.5 (medium), 2023-03-23: An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote…
CVE-2019-0211 - CVSS 7.8 (high), 2019-04-08: In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads…