CVE-2025-14443: Red Hat Openshift Container Platform 4

Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service (DoS) through Server-Side Request Forgery (SSRF) due to missing IP address and network-range validation when processing user-supplied image references.

Affected products

• Red Hat Red Hat Openshift Container Platform 4

Published 2025-12-16. Last modified 2026-06-17.