Red Hat OpenShift Container Platform For IBM LinuxONE 4.10
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:openshift_container_platform_for_ibm_linuxone:4.10:*:*:*:*:*:*:*
part: a version: 4.10 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Openshift Container Platform For Ibm Linuxone (d629b634-42fe-5cc6-b379-cddd0f2fc01e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6563 |
vulnerable | 2026-06-08 06:21:54.906456 | db.gcve.eu details are currently unavailable. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3223 |
vulnerable | 2026-06-08 06:09:38.882767 |
Undertow: outofmemoryerror due to @multipartconfig handling
HIGH (7.5)
A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.
Published: 2023-09-27T13:54:44.682Z
Updated: 2024-08-02T06:48:07.955Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0264 |
vulnerable | 2026-06-08 05:52:04.639184 |
Details available
A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue could impact confidentiality, integrity, and availability.
Published: 2023-08-04T17:09:27.693Z
Updated: 2024-08-02T05:02:44.110Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0056 |
vulnerable | 2026-06-08 05:52:04.186516 |
Details available
An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.
Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T19:35:27.521Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4361 |
vulnerable | 2026-06-08 05:51:37.342259 |
Details available
CRITICAL (10)
Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirect_uri.
Published: 2023-07-07T19:57:44.567Z
Updated: 2024-11-12T19:43:42.651Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.