[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_vYuUsQfxIxFPj3EBkot-gZwlPHq_FEP-XyBylHgUc8":3,"g5a-family:redhat\u002Fopenshift_container_platform_for_power":142,"g5a-ex:redhat\u002Fopenshift_container_platform_for_power@*":143},{"success":4,"data":5},true,{"product":6,"versions":44,"topVulnerabilitiesByEpss":56,"kevVulnerabilities":114,"seoMetadata":120,"meta":139},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":43},"redhat","openshift_container_platform_for_power",11,20,1,"2025-06-12",[14,16,21,24,27,29,31,33,36,38,40],{"version":15,"cve_count":11,"kev_count":11,"has_kev":4},"3.11_ppc64le",{"version":17,"cve_count":18,"kev_count":19,"has_kev":20},"4.10",14,0,false,{"version":22,"cve_count":23,"kev_count":19,"has_kev":20},"4.11",3,{"version":25,"cve_count":26,"kev_count":19,"has_kev":20},"4.12",5,{"version":28,"cve_count":23,"kev_count":19,"has_kev":20},"4.13",{"version":30,"cve_count":23,"kev_count":19,"has_kev":20},"4.14",{"version":32,"cve_count":23,"kev_count":19,"has_kev":20},"4.15",{"version":34,"cve_count":35,"kev_count":19,"has_kev":20},"4.16",2,{"version":37,"cve_count":11,"kev_count":19,"has_kev":20},"4.17",{"version":39,"cve_count":11,"kev_count":19,"has_kev":20},"4.18",{"version":41,"cve_count":42,"kev_count":19,"has_kev":20},"4.9",12,"Openshift Container Platform For Power by Redhat is a technology product with 11 tracked versions and 20 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[45,46,47,48,49,50,51,52,53,54,55],{"version":15,"cve_count":11,"kev_count":11,"has_kev":4},{"version":17,"cve_count":18,"kev_count":19,"has_kev":20},{"version":22,"cve_count":23,"kev_count":19,"has_kev":20},{"version":25,"cve_count":26,"kev_count":19,"has_kev":20},{"version":28,"cve_count":23,"kev_count":19,"has_kev":20},{"version":30,"cve_count":23,"kev_count":19,"has_kev":20},{"version":32,"cve_count":23,"kev_count":19,"has_kev":20},{"version":34,"cve_count":35,"kev_count":19,"has_kev":20},{"version":37,"cve_count":11,"kev_count":19,"has_kev":20},{"version":39,"cve_count":11,"kev_count":19,"has_kev":20},{"version":41,"cve_count":42,"kev_count":19,"has_kev":20},[57,65,71,76,83,89,94,98,103,109],{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":4,"epssScore":64},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",7.8,"v3.1","High",0.65005,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":62,"severity":63,"isKev":20,"epssScore":70},"CVE-2024-1635","A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and open file limits exhausted at some point, depending on the amount of memory available. \r\n\r\nAt HTTP upgrade to remoting, the WriteTimeoutStreamSinkConduit leaks connections if RemotingConnection is closed by Remoting ServerConnectionOpenListener. Because the remoting connection originates in Undertow as part of the HTTP upgrade, there is an external layer to the remoting connection. This connection is unaware of the outermost layer when closing the connection during the connection opening procedure. Hence, the Undertow WriteTimeoutStreamSinkConduit is not notified of the closed connection in this scenario. Because WriteTimeoutStreamSinkConduit creates a timeout task, the whole dependency tree leaks via that task, which is added to XNIO WorkerThread. So, the workerThread points to the Undertow conduit, which contains the connections and causes the leak.","2024-02-19",7.5,0.04572,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":69,"cvssVersion":62,"severity":63,"isKev":20,"epssScore":75},"CVE-2023-3223","A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.","2023-09-27",0.02659,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":62,"severity":81,"isKev":20,"epssScore":82},"CVE-2024-8883","A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http:\u002F\u002Flocalhost or http:\u002F\u002F127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.","2024-09-19",6.1,"Medium",0.02112,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":62,"severity":81,"isKev":20,"epssScore":88},"CVE-2023-0056","An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.","2023-03-23",6.5,0.01834,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":69,"cvssVersion":62,"severity":63,"isKev":20,"epssScore":93},"CVE-2023-1108","A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.","2023-09-14",0.01771,{"cveId":95,"description":96,"publishedDate":12,"cvssScore":69,"cvssVersion":62,"severity":63,"isKev":20,"epssScore":97},"CVE-2025-6021","A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.",0.01367,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":87,"cvssVersion":62,"severity":81,"isKev":20,"epssScore":102},"CVE-2024-9676","A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers\u002Fstorage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers\u002Fstorage library will read \u002Fetc\u002Fpasswd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.","2024-10-15",0.01336,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":107,"cvssVersion":62,"severity":81,"isKev":20,"epssScore":108},"CVE-2023-6134","A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.","2023-12-14",5.4,0.01318,{"cveId":110,"description":111,"publishedDate":106,"cvssScore":112,"cvssVersion":62,"severity":63,"isKev":20,"epssScore":113},"CVE-2023-6563","An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (> 500,000 users with each having at least 2 saved sessions). If an attacker creates two or more user sessions and then open the \"consents\" tab of the admin User Interface, the UI attempts to load a huge number of offline client sessions leading to excessive memory and CPU consumption which could potentially crash the entire system.",7.7,0.01239,[115],{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"severity":63,"isKev":4,"epssScore":64,"cisaVulnName":116,"cisaDateAdded":117,"cisaShortDescription":118,"cisaRequiredAction":119},"Apache HTTP Server Privilege Escalation Vulnerability","2021-11-03","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.","Apply updates per vendor instructions.",{"title":121,"metaDescription":122,"keywords":123,"structuredData":124},"Openshift Container Platform For Power by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openshift Container Platform For Power by Redhat covering 11 versions with 20 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Openshift Container Platform For Power vulnerabilities, Openshift Container Platform For Power security, Openshift Container Platform For Power CVE, Redhat Openshift Container Platform For Power, Openshift Container Platform For Power threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Openshift Container Platform For Power KEV, Openshift Container Platform For Power exploited vulnerabilities",{"@context":125,"@type":126,"name":127,"description":122,"url":128,"manufacturer":129,"applicationCategory":133,"softwareVersion":134,"mainEntity":135},"https:\u002F\u002Fschema.org","SoftwareApplication","Openshift Container Platform For Power","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fopenshift_container_platform_for_power",{"@type":130,"name":131,"url":132},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","11 versions tracked",{"@type":136,"name":137,"description":138,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Openshift Container Platform For Power Security Vulnerabilities","Security vulnerabilities affecting Openshift Container Platform For Power by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":140,"apiVersion":141},"2026-10-17T14:37:29.424Z","3.0",[],{"rows":144,"total":11,"capped":20,"failed":19},[145],{"cveId":58,"name":116,"severity":63,"cvss":61,"added":117,"epss":64,"published":146,"ranges":147,"checked":4,"hits":148,"covers":20},"2019-04-08T22:29:00.387",[15],[]]