Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat openshift container platform 4.7 vulnerabilities and exploits

(subscribe to this query)

6.1
CVSSv3
CVE-2020-27816
The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana console) to different one, created based on the new CR for the new kibana resource....
Elastic KibanaRedhat Openshift Container Platform 4.0
7.8
CVSSv3
CVE-2021-3578
A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly...
Mbsync Project MysyncMbsync Project Mysync 1.4.0Mbsync Project Mysync 1.4.1Redhat Openshift Container Platform 4.7Redhat Virtualization 4.0Redhat Virtualization Host 4.0Redhat Enterprise Linux 7.0Fedoraproject Fedora 33Fedoraproject Fedora 34
7.5
CVSSv3
CVE-2021-4104
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests...
Apache Log4j 1.2Fedoraproject Fedora 35Redhat Codeready Studio 12.0Redhat Integration Camel K -Redhat Integration Camel Quarkus -Redhat Jboss A-mq 6.0.0Redhat Jboss A-mq 7Redhat Jboss A-mq Streaming -Redhat Jboss Data Grid 7.0.0Redhat Jboss Data Virtualization 6.0.0Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 7.0Redhat Jboss Fuse 6.0.0Redhat Jboss Fuse 7.0.0Redhat Jboss Fuse Service Works 6.0Redhat Jboss Operations Network 3.0Redhat Jboss Web Server 3.0Redhat Openshift Application Runtimes -Redhat Openshift Container Platform 4.6Redhat Openshift Container Platform 4.7Redhat Openshift Container Platform 4.8Redhat Process Automation 7.0Redhat Single Sign-on 7.0Redhat Software Collections -Redhat Enterprise Linux 6.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Oracle Retail Allocation 14.1.3.2Oracle Retail Allocation 15.0.3.1Oracle Retail Allocation 16.0.3Oracle Retail Allocation 19.0.1Oracle Utilities Testing Accelerator 6.0.0.1.1Oracle Utilities Testing Accelerator 6.0.0.2.2Oracle Utilities Testing Accelerator 6.0.0.3.1Oracle Weblogic Server 12.2.1.3.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0
7
CVSSv3
CVE-2021-3609
.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege...
Linux Linux KernelLinux Linux Kernel 5.13Redhat 3scale Api Management 2.0Redhat Build Of Quarkus 1.0Redhat Openshift Container Platform 4.6Redhat Openshift Container Platform 4.7Redhat Openshift Container Platform 4.8Redhat Virtualization 4.0Redhat Virtualization Host 4.0Redhat Codeready Linux Builder Eus 8.1Redhat Codeready Linux Builder Eus 8.2Redhat Codeready Linux Builder Eus 8.4Redhat Codeready Linux Builder For Power Little Endian Eus 8.1Redhat Codeready Linux Builder For Power Little Endian Eus 8.2Redhat Codeready Linux Builder For Power Little Endian Eus 8.4Redhat Enterprise Linux Aus 8.2Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux For Ibm Z Systems Eus 8.4Redhat Enterprise Linux For Ibm Z Systems Eus S390x 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Power Little Endian Eus 8.4Redhat Enterprise Linux For Real Time 8.0Redhat Enterprise Linux For Real Time For Nfv 8.0Redhat Enterprise Linux For Real Time For Nfv Tus 8.0Redhat Enterprise Linux For Real Time For Nfv Tus 8.2Redhat Enterprise Linux For Real Time Tus 8.0Redhat Enterprise Linux For Real Time Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.1Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.1Redhat Enterprise Linux Server Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-29214CVE-2022-29432CVE-2022-1388LFICVE-2022-1813SSRFCVE-2022-20821CVE-2021-41834XML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook