# Redhat Openshift


- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2015-5317](https://insights.sbomify.com/CVE-2015-5317/): Jenkins User Interface (UI) Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2014-3496](https://insights.sbomify.com/CVE-2014-3496/): Command injection in n/a (critical 10.0)
- [CVE-2014-0234](https://insights.sbomify.com/CVE-2014-0234/): Hardcoded credentials in Red Hat OpenShift Enterprise (critical 9.8)
- [CVE-2013-2060](https://insights.sbomify.com/CVE-2013-2060/): Command injection in OpenShift Origin (critical 9.8)
- [CVE-2014-0175](https://insights.sbomify.com/CVE-2014-0175/): Hardcoded credentials in mcollective (critical 9.8)
- [CVE-2015-7501](https://insights.sbomify.com/CVE-2015-7501/): Deserialization of Untrusted Data in Apache commons collections (critical 9.8)
- [CVE-2016-2074](https://insights.sbomify.com/CVE-2016-2074/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-0788](https://insights.sbomify.com/CVE-2016-0788/): Jenkins allows Execution of Code by Opening a JRMP Listener (critical 9.8)
- [CVE-2016-0791](https://insights.sbomify.com/CVE-2016-0791/): Exposure of Sensitive Information in Jenkins Core (critical 9.8)
- [CVE-2015-5254](https://insights.sbomify.com/CVE-2015-5254/): Improper Input Validation in Apache ActiveMQ (critical 9.8)
- [CVE-2013-4561](https://insights.sbomify.com/CVE-2013-4561/): Path traversal in openshift-origin-msg-node-mcollective (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/products/redhat/openshift/