CVEs we hold for Openshift

Records whose assigning authority named Openshift as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-71568BMCtest exposes Ironic without authentication and TLS during the testopenshift-metal3 bmctest

CVE-2026-71567User-controlled variables inserted unescaped into shell scripts and Kubernetes manifestsopenshift-metal3 fakefish

CVE-2026-71566KubeVirt backend is not authenticatedopenshift-metal3 fakefish

CVE-2023-3089Ocp & fips moden/a openshift; Red Hat OpenShift Serverless…

CVE-2022-4145Content spoofingn/a openshift; Red Hat OpenShift Container Platform 4

CVE-2022-3262no title heldn/a openshift

CVE-2022-3260no title heldn/a Openshift

CVE-2022-3259no title heldn/a OpenShift

CVE-2022-2403no title heldn/a Openshift

CVE-2022-1677no title heldn/a Openshift

CVE-2022-1632no title heldn/a Openshift

CVE-2021-4294OpenShift OSIN CheckClientSecret timing discrepancyOpenShift OSIN

CVE-2021-4047no title heldn/a OpenShift

CVE-2021-3636no title heldn/a openshift

CVE-2021-3499no title heldn/a openshift/ovn-kubernetes

CVE-2021-3344no title heldn/a openshift/builder

CVE-2021-20238no title heldn/a openshift/machine-config-operator

CVE-2021-20198no title heldn/a openshift/installer

CVE-2021-20182no title heldn/a openshift

CVE-2020-35514no title heldn/a openshift/machine-config-operator

CVE-2020-27833no title heldn/a openshift/oc

CVE-2020-27816no title heldn/a openshift-logging/console

CVE-2020-1761no title heldn/a openshift/console

CVE-2020-14336no title heldn/a Openshift

CVE-2020-14306no title heldn/a openshift-service-mesh/istio-rhel8-operator

CVE-2020-10752no title heldopenshift/openshift-apiserver

CVE-2020-10715no title heldn/a openshift/console

CVE-2019-19350no title heldn/a openshift/ansible-service-broker

CVE-2019-19348no title heldOpenshift Enterprise openshift/apb-base

CVE-2019-19346no title heldOpenshift Enterprise openshift/mariadb-apb

CVE-2019-10200no title heldn/a OpenShift Container Platform

CVE-2018-1103no title heldOpenshift Enterprise unsanitized paths in tar.go

CVE-2015-3207no title heldn/a Openshift Origin

CVE-2014-3592no title heldOpenShift Origin

CVE-2014-0163no title heldOpenshift

CVE-2014-0068no title heldn/a openshift node-util

CVE-2014-0023no title heldOpenShift

CVE-2013-4561no title heldn/a openshift-origin-msg-node-mcollective

CVE-2013-2103no title heldOpenShift cartridge

CVE-2013-0196no title heldOpenShift Enterprise

CVE-2013-0165no title heldOpenShift mongodb cartridge

CVE-2013-0163no title heldOpenShift haproxy cartridge

42 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.