[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKMny9IqA-przj-amJX5h4mVx8IwuESgWvlqOtF8SvxE":3,"g5a-family:redhat\u002Fopenshift":325,"g5a-ex:redhat\u002Fopenshift@*":355},{"success":4,"data":5},true,{"product":6,"versions":164,"topVulnerabilitiesByEpss":233,"kevVulnerabilities":294,"seoMetadata":304,"meta":323},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":163},"redhat","openshift",68,177,2,"2026-03-25",[14,19,22,24,26,28,30,32,34,36,38,40,42,45,48,50,52,54,57,59,62,64,66,68,70,72,74,76,78,81,83,86,88,90,93,95,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"0.0.5",1,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"1.0",13,{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},"1.1",{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},"1.2",{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.1",{"version":29,"cve_count":11,"kev_count":17,"has_kev":18},"1.2.2",{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.3",{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.4",{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.5",{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.6",{"version":39,"cve_count":16,"kev_count":17,"has_kev":18},"1.2.7",{"version":41,"cve_count":16,"kev_count":17,"has_kev":18},"1.2.8",{"version":43,"cve_count":44,"kev_count":16,"has_kev":4},"2.0",30,{"version":46,"cve_count":47,"kev_count":17,"has_kev":18},"2.0.1",3,{"version":49,"cve_count":47,"kev_count":17,"has_kev":18},"2.0.2",{"version":51,"cve_count":47,"kev_count":17,"has_kev":18},"2.0.3",{"version":53,"cve_count":47,"kev_count":17,"has_kev":18},"2.0.4",{"version":55,"cve_count":56,"kev_count":17,"has_kev":18},"2.0.5",4,{"version":58,"cve_count":47,"kev_count":17,"has_kev":18},"2.0.6",{"version":60,"cve_count":61,"kev_count":17,"has_kev":18},"2.1",5,{"version":63,"cve_count":47,"kev_count":17,"has_kev":18},"2.1.1",{"version":65,"cve_count":11,"kev_count":17,"has_kev":18},"2.1.2",{"version":67,"cve_count":11,"kev_count":17,"has_kev":18},"2.1.3",{"version":69,"cve_count":11,"kev_count":17,"has_kev":18},"2.1.4",{"version":71,"cve_count":11,"kev_count":17,"has_kev":18},"2.1.5",{"version":73,"cve_count":11,"kev_count":17,"has_kev":18},"2.1.6",{"version":75,"cve_count":11,"kev_count":17,"has_kev":18},"2.1.7",{"version":77,"cve_count":16,"kev_count":17,"has_kev":18},"2.2",{"version":79,"cve_count":80,"kev_count":17,"has_kev":18},"3.0",15,{"version":82,"cve_count":16,"kev_count":17,"has_kev":18},"3.0.0.0",{"version":84,"cve_count":85,"kev_count":17,"has_kev":18},"3.1",21,{"version":87,"cve_count":11,"kev_count":17,"has_kev":18},"3.10",{"version":89,"cve_count":17,"kev_count":17,"has_kev":18},"3.10.0",{"version":91,"cve_count":92,"kev_count":17,"has_kev":18},"3.11",6,{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},"3.11.188-4",{"version":96,"cve_count":97,"kev_count":17,"has_kev":18},"3.2",18,{"version":99,"cve_count":16,"kev_count":17,"has_kev":18},"3.2.1.23",{"version":101,"cve_count":56,"kev_count":17,"has_kev":18},"3.3",{"version":103,"cve_count":16,"kev_count":17,"has_kev":18},"3.3.1.11",{"version":105,"cve_count":56,"kev_count":17,"has_kev":18},"3.4",{"version":107,"cve_count":47,"kev_count":17,"has_kev":18},"3.5",{"version":109,"cve_count":56,"kev_count":17,"has_kev":18},"3.6",{"version":111,"cve_count":61,"kev_count":17,"has_kev":18},"3.7",{"version":113,"cve_count":17,"kev_count":17,"has_kev":18},"3.7.0",{"version":115,"cve_count":17,"kev_count":17,"has_kev":18},"3.7.1",{"version":117,"cve_count":17,"kev_count":17,"has_kev":18},"3.7.2",{"version":119,"cve_count":11,"kev_count":17,"has_kev":18},"3.8",{"version":121,"cve_count":17,"kev_count":17,"has_kev":18},"3.8.0",{"version":123,"cve_count":47,"kev_count":17,"has_kev":18},"3.9",{"version":125,"cve_count":17,"kev_count":17,"has_kev":18},"3.9.0",{"version":127,"cve_count":128,"kev_count":17,"has_kev":18},"4.0",7,{"version":130,"cve_count":16,"kev_count":17,"has_kev":18},"4.1",{"version":132,"cve_count":11,"kev_count":17,"has_kev":18},"4.11",{"version":134,"cve_count":16,"kev_count":17,"has_kev":18},"4.12",{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},"4.1.37",{"version":138,"cve_count":47,"kev_count":17,"has_kev":18},"4.2",{"version":140,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.21",{"version":142,"cve_count":17,"kev_count":17,"has_kev":18},"4.3",{"version":144,"cve_count":17,"kev_count":17,"has_kev":18},"4.3.5",{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},"4.6.0",{"version":148,"cve_count":17,"kev_count":17,"has_kev":18},"4.6.52",{"version":150,"cve_count":16,"kev_count":17,"has_kev":18},"4.7.0",{"version":152,"cve_count":17,"kev_count":17,"has_kev":18},"4.7.0-202105111858",{"version":154,"cve_count":17,"kev_count":17,"has_kev":18},"4.7.40",{"version":156,"cve_count":17,"kev_count":17,"has_kev":18},"4.8.0",{"version":158,"cve_count":17,"kev_count":17,"has_kev":18},"4.8.24",{"version":160,"cve_count":56,"kev_count":17,"has_kev":18},"4.9",{"version":162,"cve_count":16,"kev_count":17,"has_kev":18},"5.0","Openshift by Redhat is a technology product with 68 tracked versions and 177 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},{"version":29,"cve_count":11,"kev_count":17,"has_kev":18},{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},{"version":39,"cve_count":16,"kev_count":17,"has_kev":18},{"version":41,"cve_count":16,"kev_count":17,"has_kev":18},{"version":43,"cve_count":44,"kev_count":16,"has_kev":4},{"version":46,"cve_count":47,"kev_count":17,"has_kev":18},{"version":49,"cve_count":47,"kev_count":17,"has_kev":18},{"version":51,"cve_count":47,"kev_count":17,"has_kev":18},{"version":53,"cve_count":47,"kev_count":17,"has_kev":18},{"version":55,"cve_count":56,"kev_count":17,"has_kev":18},{"version":58,"cve_count":47,"kev_count":17,"has_kev":18},{"version":60,"cve_count":61,"kev_count":17,"has_kev":18},{"version":63,"cve_count":47,"kev_count":17,"has_kev":18},{"version":65,"cve_count":11,"kev_count":17,"has_kev":18},{"version":67,"cve_count":11,"kev_count":17,"has_kev":18},{"version":69,"cve_count":11,"kev_count":17,"has_kev":18},{"version":71,"cve_count":11,"kev_count":17,"has_kev":18},{"version":73,"cve_count":11,"kev_count":17,"has_kev":18},{"version":75,"cve_count":11,"kev_count":17,"has_kev":18},{"version":77,"cve_count":16,"kev_count":17,"has_kev":18},{"version":79,"cve_count":80,"kev_count":17,"has_kev":18},{"version":82,"cve_count":16,"kev_count":17,"has_kev":18},{"version":84,"cve_count":85,"kev_count":17,"has_kev":18},{"version":87,"cve_count":11,"kev_count":17,"has_kev":18},{"version":89,"cve_count":17,"kev_count":17,"has_kev":18},{"version":91,"cve_count":92,"kev_count":17,"has_kev":18},{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},{"version":96,"cve_count":97,"kev_count":17,"has_kev":18},{"version":99,"cve_count":16,"kev_count":17,"has_kev":18},{"version":101,"cve_count":56,"kev_count":17,"has_kev":18},{"version":103,"cve_count":16,"kev_count":17,"has_kev":18},{"version":105,"cve_count":56,"kev_count":17,"has_kev":18},{"version":107,"cve_count":47,"kev_count":17,"has_kev":18},{"version":109,"cve_count":56,"kev_count":17,"has_kev":18},{"version":111,"cve_count":61,"kev_count":17,"has_kev":18},{"version":113,"cve_count":17,"kev_count":17,"has_kev":18},{"version":115,"cve_count":17,"kev_count":17,"has_kev":18},{"version":117,"cve_count":17,"kev_count":17,"has_kev":18},{"version":119,"cve_count":11,"kev_count":17,"has_kev":18},{"version":121,"cve_count":17,"kev_count":17,"has_kev":18},{"version":123,"cve_count":47,"kev_count":17,"has_kev":18},{"version":125,"cve_count":17,"kev_count":17,"has_kev":18},{"version":127,"cve_count":128,"kev_count":17,"has_kev":18},{"version":130,"cve_count":16,"kev_count":17,"has_kev":18},{"version":132,"cve_count":11,"kev_count":17,"has_kev":18},{"version":134,"cve_count":16,"kev_count":17,"has_kev":18},{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},{"version":138,"cve_count":47,"kev_count":17,"has_kev":18},{"version":140,"cve_count":17,"kev_count":17,"has_kev":18},{"version":142,"cve_count":17,"kev_count":17,"has_kev":18},{"version":144,"cve_count":17,"kev_count":17,"has_kev":18},{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},{"version":148,"cve_count":17,"kev_count":17,"has_kev":18},{"version":150,"cve_count":16,"kev_count":17,"has_kev":18},{"version":152,"cve_count":17,"kev_count":17,"has_kev":18},{"version":154,"cve_count":17,"kev_count":17,"has_kev":18},{"version":156,"cve_count":17,"kev_count":17,"has_kev":18},{"version":158,"cve_count":17,"kev_count":17,"has_kev":18},{"version":160,"cve_count":56,"kev_count":17,"has_kev":18},{"version":162,"cve_count":16,"kev_count":17,"has_kev":18},[234,242,248,256,262,267,272,278,282,287],{"cveId":235,"description":236,"publishedDate":237,"cvssScore":238,"cvssVersion":239,"severity":240,"isKev":4,"epssScore":241},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":243,"description":244,"publishedDate":245,"cvssScore":246,"cvssVersion":239,"severity":240,"isKev":18,"epssScore":247},"CVE-2019-5736","runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to \u002Fproc\u002Fself\u002Fexe.","2019-02-11",8.6,0.98452,{"cveId":249,"description":250,"publishedDate":251,"cvssScore":252,"cvssVersion":253,"severity":254,"isKev":18,"epssScore":255},"CVE-2015-7501","Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift\u002FxPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.","2017-11-09",9.8,"v3.0","Critical",0.85562,{"cveId":257,"description":258,"publishedDate":259,"cvssScore":260,"cvssVersion":253,"severity":240,"isKev":18,"epssScore":261},"CVE-2016-0792","Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.","2016-04-07",8.8,0.83259,{"cveId":263,"description":264,"publishedDate":265,"cvssScore":252,"cvssVersion":253,"severity":254,"isKev":18,"epssScore":266},"CVE-2015-5254","Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.","2016-01-08",0.38191,{"cveId":268,"description":269,"publishedDate":270,"cvssScore":238,"cvssVersion":239,"severity":240,"isKev":4,"epssScore":271},"CVE-2015-5317","The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.","2015-11-25",0.23003,{"cveId":273,"description":274,"publishedDate":275,"cvssScore":238,"cvssVersion":276,"severity":240,"isKev":18,"epssScore":277},"CVE-2013-2186","The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.","2013-10-28","v2",0.12666,{"cveId":279,"description":280,"publishedDate":259,"cvssScore":252,"cvssVersion":253,"severity":254,"isKev":18,"epssScore":281},"CVE-2016-0788","The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.",0.1184,{"cveId":283,"description":284,"publishedDate":285,"cvssScore":238,"cvssVersion":239,"severity":240,"isKev":18,"epssScore":286},"CVE-2024-12085","A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","2025-01-14",0.08823,{"cveId":288,"description":289,"publishedDate":290,"cvssScore":291,"cvssVersion":239,"severity":292,"isKev":18,"epssScore":293},"CVE-2013-5123","The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.","2019-11-05",5.9,"Medium",0.07987,[295,299],{"cveId":235,"description":236,"publishedDate":237,"cvssScore":238,"severity":240,"isKev":4,"epssScore":241,"cisaVulnName":296,"cisaDateAdded":237,"cisaShortDescription":297,"cisaRequiredAction":298},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":268,"description":269,"publishedDate":270,"cvssScore":238,"severity":240,"isKev":4,"epssScore":271,"cisaVulnName":300,"cisaDateAdded":301,"cisaShortDescription":302,"cisaRequiredAction":303},"Jenkins User Interface (UI) Information Disclosure Vulnerability","2023-05-12","Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the \"Fingerprints\" pages.","Apply updates per vendor instructions.",{"title":305,"metaDescription":306,"keywords":307,"structuredData":308},"Openshift by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openshift by Redhat covering 68 versions with 177 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Openshift vulnerabilities, Openshift security, Openshift CVE, Redhat Openshift, Openshift threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Openshift KEV, Openshift exploited vulnerabilities",{"@context":309,"@type":310,"name":311,"description":306,"url":312,"manufacturer":313,"applicationCategory":317,"softwareVersion":318,"mainEntity":319},"https:\u002F\u002Fschema.org","SoftwareApplication","Openshift","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fopenshift",{"@type":314,"name":315,"url":316},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","68 versions tracked",{"@type":320,"name":321,"description":322,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Openshift Security Vulnerabilities","Security vulnerabilities affecting Openshift by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":324,"apiVersion":79},"2026-10-17T14:58:28.595Z",[326,329,332,334,337,339,342,345,347,349,351,353],{"product":327,"cves":328},"openshift_container_platform",267,{"product":330,"cves":331},"openshift_application_runtimes",33,{"product":333,"cves":85},"openshift_service_mesh",{"product":335,"cves":336},"openshift_container_platform_for_power",20,{"product":338,"cves":80},"openshift_container_platform_for_linuxone",{"product":340,"cves":341},"openshift_origin",10,{"product":343,"cves":344},"openshift_container_platform_ibm_z_systems",8,{"product":346,"cves":344},"openshift_container_platform_for_ibm_z",{"product":348,"cves":92},"openshift_container_platform_for_arm64",{"product":350,"cves":61},"openshift_developer_tools_and_services",{"product":352,"cves":61},"openshift_container_platform_for_ibm_linuxone",{"product":354,"cves":56},"openshift_data_science",{"rows":356,"total":11,"capped":18,"failed":17},[357,361],{"cveId":235,"name":296,"severity":240,"cvss":238,"added":237,"epss":241,"published":358,"ranges":359,"checked":4,"hits":360,"covers":18},"2023-10-10T14:15:10.883",[],[],{"cveId":268,"name":300,"severity":240,"cvss":238,"added":301,"epss":271,"published":362,"ranges":363,"checked":4,"hits":365,"covers":18},"2015-11-25T20:59:07.68",[364],"up to 3.1",[]]