GCVE - cpe:2.3:a:redhat:openshift:2.0:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openshift:2.0:*:*:*:enterprise:*:*:*

part: a version: 2.0 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Openshift (`c1e101a6-4198-51dc-8dd3-fad3fe32c7b8`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openshift/okd`	purl2cpe	2026-06-01 10:12:54.179092

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-2611`	vulnerable	2026-06-08 05:09:24.730487	Details available MEDIUM (4.3) Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes (that are otherwise performed daily), possibly causing additional load on Jenkins master and agents. Published: 2018-05-08T18:00:00.000Z Updated: 2024-08-05T14:02:06.500Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2017-02-01/ http://www.securityfocus.com/bid/95956 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2611 https://github.com/jenkinsci/jenkins/commit/97a61a9fe55f4c16168c123f98301a5173b9fa86	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-1000229`	vulnerable	2026-06-08 05:07:16.917722	Details available swagger-ui has XSS in key names Published: 2019-12-20T13:02:44.000Z Updated: 2024-08-06T03:55:27.059Z Open on db.gcve.eu Reference links https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000229.json https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000229 http://www.securityfocus.com/bid/97580 https://access.redhat.com/errata/RHSA-2017:0868	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0163`	vulnerable	2026-06-08 05:05:11.926576	Details available Openshift has shell command injection flaws due to unsanitized data being passed into shell commands. Published: 2019-12-11T15:33:33.000Z Updated: 2024-08-06T09:05:38.899Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0163 https://access.redhat.com/security/cve/cve-2014-0163	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7370`	vulnerable	2026-06-08 05:05:10.161352	Details available node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware Published: 2019-12-11T13:55:37.000Z Updated: 2024-08-06T18:01:20.629Z Open on db.gcve.eu Reference links https://nodesecurity.io/advisories/methodOverride_Middleware_Reflected_Cross-Site_Scripting https://security-tracker.debian.org/tracker/CVE-2013-7370 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7370 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-7370 https://access.redhat.com/security/cve/cve-2013-7370	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5123`	vulnerable	2026-06-08 05:04:50.831634	Details available The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks. Published: 2019-11-05T21:16:59.000Z Updated: 2024-08-06T17:06:50.907Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2013-5123 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-5123 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-5123 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155248.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155291.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4364`	vulnerable	2026-06-08 05:04:35.763459	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0163`	vulnerable	2026-06-08 05:03:02.191732	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6685`	vulnerable	2026-06-08 05:03:01.555224	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.