Redhat Openshift Data Science — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Openshift Data Science, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-0923 — CVSS 8.8 (high): A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications…
• CVE-2024-7557 — CVSS 8.8 (high): A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same…
• CVE-2023-3361 — CVSS 7.7 (high): A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or…
• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…