Red Hat Openshift Container Platform For IBM Linuxone vulnerabilities

5 CVEs affecting Red Hat Openshift Container Platform For IBM Linuxone, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-6563, published 2023-12-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-3223, published 2023-09-27. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of…
CVE-2023-0056, published 2023-03-23. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted…
CVE-2023-0264, published 2023-08-04. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the…
CVE-2023-6563, published 2023-12-14. High severity, CVSS 7.7. EPSS: 1.2% chance of exploitation in the next 30 days. An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (> 500,000 users with each having at least 2…
CVE-2022-4361, published 2023-07-07. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute…