VendorsRed Hatopenshiftany version
Vulnerabilities

Red Hat OpenShift any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

134CVEs
CVE-2026-18169
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
9.9EPSS 0.008
CVE-2014-0234
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this may overlap CVE-2013-4253 and CVE-2013-4281.
Published 2020-02-12 · Modified
9.8EPSS 0.038
CVE-2021-20578
IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions due to improper or missing authentication controls. IBM X-Force ID: 199282.
Published 2021-09-30 · Modified
9.8EPSS 0.010
CVE-2026-18162
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
9.8EPSS 0.009
CVE-2022-41731
IBM Watson Knowledge Catalog on Cloud Pak SQL injection
Published 2023-02-06 · Modified
9.8EPSS 0.009
CVE-2026-18163
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
9.8EPSS 0.008
CVE-2023-38734
IBM Robotic Process Automation privilege escalation
Published 2023-08-22 · Modified
9.8EPSS 0.007
CVE-2023-43058
IBM Robotic Process Automation privilege escalation
Published 2023-10-06 · Modified
9.8EPSS 0.007
CVE-2026-17618
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
9.8EPSS 0.002
CVE-2026-18872
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-23 · Analyzed
9.3EPSS 0.003
CVE-2013-4561
In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.
Published 2022-06-30 · Modified
9.1EPSS 0.014
CVE-2026-17635
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
9.1EPSS 0.005
CVE-2026-17645
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
9.1EPSS 0.003
CVE-2022-43916
IBM App Connect Enterprise Certified Container improper communications restriction
Published 2025-01-30 · Analyzed
9.1EPSS 0.003
CVE-2015-7537
Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method.
Published 2016-02-03 · Modified
8.8EPSS 0.024
CVE-2015-7538
Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.
Published 2016-02-03 · Modified
8.8EPSS 0.022
CVE-2026-18490
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-23 · Analyzed
8.8EPSS 0.008
CVE-2026-17636
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
8.8EPSS 0.007
CVE-2022-43844
IBM Robotic Process Automation for Cloud Pak session fixation
Published 2023-01-05 · Modified
8.8EPSS 0.007
CVE-2026-17637
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
8.8EPSS 0.007
CVE-2024-51465
IBM App Connect Enterprise Certified Container command execution
Published 2024-12-04 · Analyzed
8.8EPSS 0.007
CVE-2026-18095
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
8.8EPSS 0.004
CVE-2026-17647
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
8.8EPSS 0.002
CVE-2026-17643
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
8.8EPSS 0.001
CVE-2026-17644
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
8.8EPSS 0.001
CVE-2026-17646
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
8.5EPSS 0.003
CVE-2026-19179
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-23 · Analyzed
8.2EPSS 0.005
CVE-2026-18074
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
8.2EPSS 0.004
CVE-2026-18131
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
8.2EPSS 0.002
CVE-2021-4125
It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed. This CVE only applies to the OpenShift Metering hive container images, shipped in OpenShift 4.8, 4.7 and 4.6.
Published 2022-08-24 · Modified
8.1EPSS 0.015
CVE-2026-18137
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
8.1EPSS 0.005
CVE-2026-18181
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-23 · Analyzed
8.1EPSS 0.004
CVE-2026-18154
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
8.0EPSS 0.003
CVE-2026-18066
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
7.9EPSS 0.001
CVE-2014-0023
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution
Published 2019-11-15 · Modified
7.8EPSS 0.004
CVE-2019-19345
A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mediawiki-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Published 2020-03-20 · Modified
7.8EPSS 0.003
CVE-2020-1709
A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/mediawiki. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Published 2020-03-20 · Modified
7.8EPSS 0.003
CVE-2023-22593
IBM Robotic Process Automation for Cloud Pak security configuration
Published 2023-06-27 · Modified
7.8EPSS 0.002
CVE-2023-22592
IBM Robotic Process Automation for Cloud Pak insufficient permission settings
Published 2023-01-18 · Modified
7.8EPSS 0.002
CVE-2026-18123
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published 2026-09-22 · Analyzed
7.6EPSS 0.003
1 / 4Next →