Red Hat Openshift vulnerabilities

146 CVEs affecting Red Hat Openshift, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-35092, published 2026-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2015-5317: Jenkins User Interface (UI) Information Disclosure Vulnerability, published 2015-11-25. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-05-12. EPSS: 23% chance of exploitation in the next 30 days. The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.
CVE-2019-5736, published 2019-02-11. High severity, CVSS 8.6. EPSS: 98.5% chance of exploitation in the next 30 days. runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to…
CVE-2015-7501, published 2017-11-09. Critical severity, CVSS 9.8. EPSS: 85.6% chance of exploitation in the next 30 days. Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service…
CVE-2016-0792, published 2016-04-07. High severity, CVSS 8.8. EPSS: 83.3% chance of exploitation in the next 30 days. Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and…
CVE-2015-5254, published 2016-01-08. Critical severity, CVSS 9.8. EPSS: 38.2% chance of exploitation in the next 30 days. Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message…
CVE-2013-2186, published 2013-10-28. High severity, CVSS 7.5. EPSS: 12.7% chance of exploitation in the next 30 days. The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write…
CVE-2016-0788, published 2016-04-07. Critical severity, CVSS 9.8. EPSS: 11.8% chance of exploitation in the next 30 days. The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.
CVE-2024-12085, published 2025-01-14. High severity, CVSS 7.5. EPSS: 8.8% chance of exploitation in the next 30 days. A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a…
CVE-2013-5123, published 2019-11-05. Medium severity, CVSS 5.9. EPSS: 8% chance of exploitation in the next 30 days. The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

Latest

CVE-2026-35092, published 2026-04-01. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP)…
CVE-2026-35091, published 2026-04-01. High severity, CVSS 8.2. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User…
CVE-2025-14512, published 2025-12-11. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when…
CVE-2024-45777, published 2025-02-19. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue…
CVE-2024-1485, published 2024-02-14. Critical severity, CVSS 9.3. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or…
CVE-2023-0229, published 2023-01-26. Medium severity, CVSS 6.3. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they…
CVE-2023-0296, published 2023-01-17. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the…
CVE-2022-3259, published 2022-12-09. High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days. Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.