Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    4 vulnerabilities found for File Integrity Operator by Red Hat

    CVE-2026-4645 (GCVE-0-2026-4645)

    Vulnerability from nvd – Published: 2026-03-23 13:35 – Updated: 2026-03-30 08:01
    VLAI

    Duplicate of CVE-2026-32287

    Show details on NVD website

    {
      "containers": {
        "cna": {
          "providerMetadata": {
            "dateUpdated": "2026-03-30T08:01:39.710Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "rejectedReasons": [
            {
              "lang": "en",
              "value": "Duplicate of CVE-2026-32287"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-4645",
        "datePublished": "2026-03-23T13:35:22.985Z",
        "dateRejected": "2026-03-30T08:01:39.710Z",
        "dateReserved": "2026-03-23T12:21:39.096Z",
        "dateUpdated": "2026-03-30T08:01:39.710Z",
        "state": "REJECTED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2025-7195 (GCVE-0-2025-7195)

    Vulnerability from nvd – Published: 2025-08-07 19:05 – Updated: 2026-06-25 23:26
    VLAI
    Title
    Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd
    Summary
    Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. In affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-276 - Incorrect Default Permissions
    Assigner
    References
    URL Tags
    https://access.redhat.com/errata/RHEA-2025:23406 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHEA-2025:23478 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHEA-2026:0129 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:19332 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:19335 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:19958 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:19961 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:21368 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:21885 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22415 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22416 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22418 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22420 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22683 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22684 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:23528 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:23529 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:23542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:0627 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:0718 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:0722 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:0737 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2572 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:5633 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2025-7195 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2376300 issue-trackingx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    operator-framework operator-sdk Affected: 0 , < 0.15.2 (semver)
    Create a notification for this product.
    Red Hat RHEL-9-CNV-4.17 Unaffected: v4.17.39-2 , < * (rpm)
        cpe:/a:redhat:container_native_virtualization:4.17::el9
    Create a notification for this product.
    Red Hat RHEL-9-CNV-4.18 Unaffected: v4.18.25-3 , < * (rpm)
        cpe:/a:redhat:container_native_virtualization:4.18::el9
    Create a notification for this product.
    Red Hat RHEL-9-CNV-4.20 Unaffected: v4.20.3-3 , < * (rpm)
        cpe:/a:redhat:container_native_virtualization:4.20::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: v2.6 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.7 Unaffected: v2.7 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.7::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765872406 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1766360304 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765669648 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765866268 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765872399 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765872402 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765872398 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765872400 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: v2.9 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat OpenShift Compliance Operator 1 Unaffected: 1.8.0 , < * (rpm)
        cpe:/a:redhat:openshift_compliance_operator:1::el9
    Create a notification for this product.
    Red Hat OpenShift Compliance Operator 1 Unaffected: 1768172669 , < * (rpm)
        cpe:/a:redhat:openshift_compliance_operator:1::el9
    Create a notification for this product.
    Red Hat OpenShift File Integrity Operator - FIO 1 Unaffected: v1.3 , < * (rpm)
        cpe:/a:redhat:openshift_file_integrity_operator:1::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 Unaffected: v2.11 , < * (rpm)
        cpe:/a:redhat:acm:2.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: v2.12 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: 1773285089 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: 1773259164 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: 1773259182 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: 1773358651 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: 1773090513 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1767569821 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1767829032 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1767656229 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: v2.14 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1769720041 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1770343757 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1769721579 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1770336554 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178221 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178222 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178236 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178273 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178715 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178261 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178354 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178419 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178768 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178319 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178386 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178406 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178615 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178379 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178329 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178423 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764215448 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176261 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176342 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176372 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176892 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176485 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176698 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176699 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176675 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764177101 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176690 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764221806 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764222436 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764177174 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764177033 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176958 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764177020 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764177029 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764168955 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169118 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169242 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169544 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169347 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169479 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169526 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169464 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169687 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169457 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169527 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169577 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169730 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169598 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169623 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169710 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764170019 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764170021 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764167834 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764167795 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764167826 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764167876 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168179 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764167987 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168476 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168475 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168431 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168662 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168536 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168609 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168731 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168699 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168859 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764169063 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764169125 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764169222 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854289 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854280 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854319 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761855549 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854321 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854422 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854430 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854457 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854484 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854398 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854494 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854493 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854504 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854489 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761855467 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854524 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1762335558 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761855234 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Multicluster Engine for Kubernetes     cpe:/a:redhat:multicluster_engine
    Create a notification for this product.
    Red Hat Multicluster Global Hub     cpe:/a:redhat:multicluster_globalhub
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2     cpe:/a:redhat:acm:2
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4     cpe:/a:redhat:advanced_cluster_security:4
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Web Terminal     cpe:/a:redhat:webterminal:1
    Create a notification for this product.
    Date Public
    2025-08-07 18:59
    Credits
    Red Hat would like to thank Antony Di Scala, James Force, and Michael Whale for reporting this issue.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-7195",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-08-07T19:23:11.314765Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-08-07T19:36:47.691Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://github.com/operator-framework/operator-sdk",
              "defaultStatus": "unaffected",
              "packageName": "operator-sdk",
              "product": "operator-sdk",
              "vendor": "operator-framework",
              "versions": [
                {
                  "lessThan": "0.15.2",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9",
              "product": "RHEL-9-CNV-4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17.39-2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9",
              "product": "RHEL-9-CNV-4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18.25-3",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4.20::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9",
              "product": "RHEL-9-CNV-4.20",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.20.3-3",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/addon-manager-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/discovery-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/placement-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-operator-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/work-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/addon-manager-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/discovery-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/placement-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-operator-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/work-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/addon-manager-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/discovery-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/placement-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-operator-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/work-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/addon-manager-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765872406",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1766360304",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/discovery-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765669648",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765866268",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/placement-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765872399",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-operator-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765872402",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765872398",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/work-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765872400",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/addon-manager-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/discovery-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/placement-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-operator-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/work-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_compliance_operator:1::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "compliance/openshift-compliance-rhel8-operator",
              "product": "OpenShift Compliance Operator 1",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1.8.0",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_compliance_operator:1::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "compliance/openshift-compliance-rhel8-operator",
              "product": "OpenShift Compliance Operator 1",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1768172669",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_file_integrity_operator:1::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "compliance/openshift-file-integrity-rhel8-operator",
              "product": "OpenShift File Integrity Operator - FIO 1",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v1.3",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.11::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.11",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.11::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-application-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.11",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.11::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-channel-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.11",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.11::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.11",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/acm-cluster-permission-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicloud-integrations-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-application-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-channel-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/acm-cluster-permission-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1773285089",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicloud-integrations-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1773259164",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-application-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1773259182",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-channel-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1773358651",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1773090513",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.13::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/acm-cluster-permission-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1767569821",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.13::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1767829032",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.13::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/acm-cluster-permission-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1767569821",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.13::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/cluster-backup-rhel9-operator",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1767656229",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.13::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1767829032",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/acm-cluster-permission-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicloud-integrations-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-application-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-channel-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicloud-integrations-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1769720041",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-application-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1770343757",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-channel-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1769721579",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1770336554",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178221",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-cli-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178222",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-core-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178236",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178273",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178715",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178261",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-metrics-exporter-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178354",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178419",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178768",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cosi-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178319",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178386",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178406",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178615",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178379",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-must-gather-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178329",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178423",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odr-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178419",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/rook-ceph-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764215448",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176261",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-core-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176342",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176372",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176892",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176485",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-metrics-exporter-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176698",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176699",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cli-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176675",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177101",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cosi-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176690",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764221806",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764222436",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177174",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177033",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-must-gather-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176958",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177101",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odr-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177020",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/rook-ceph-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177029",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764168955",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-core-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169118",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169242",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169544",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169347",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-metrics-exporter-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169479",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169526",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cli-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169464",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169687",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cosi-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169457",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169527",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169577",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169730",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169598",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-must-gather-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169623",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169710",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odr-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764170019",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/rook-ceph-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764170021",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764167834",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764167795",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-core-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764167826",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764167876",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168179",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764167987",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-metrics-exporter-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168476",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168475",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cli-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168431",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168662",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cosi-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168475",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168536",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168609",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168731",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168699",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-must-gather-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168859",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764169063",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odr-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764169125",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/rook-ceph-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764169222",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854289",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854280",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-core-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854280",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854319",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761855549",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854321",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-metrics-exporter-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854422",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854430",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cli-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854457",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854484",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cosi-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854398",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854494",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854493",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854504",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854489",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-must-gather-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761855467",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854524",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odr-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1762335558",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/rook-ceph-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761855234",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/addon-manager-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-engine/discovery-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/hypershift-addon-rhel8-operator",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-engine/managedcluster-import-controller-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/placement-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/registration-operator-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/registration-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/work-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_globalhub"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
              "product": "Multicluster Global Hub",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_globalhub"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9",
              "product": "Multicluster Global Hub",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_globalhub"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-globalhub/multicluster-globalhub-rhel9-operator",
              "product": "Multicluster Global Hub",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "rhacm2/acm-cluster-permission-rhel8",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/cert-policy-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/config-policy-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/endpoint-monitoring-rhel9-operator",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/governance-policy-propagator-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/grafana-dashboard-loader-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/iam-policy-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel8",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/metrics-collector-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "rhacm2/multicloud-integrations-rhel8",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/multicluster-observability-rhel9-operator",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "rhacm2/multicluster-operators-application-rhel8",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "rhacm2/multicluster-operators-channel-rhel8",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/rbac-query-proxy-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/search-collector-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:advanced_cluster_security:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
              "product": "Red Hat Advanced Cluster Security 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:service_registry:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "apicurio/apicurio-registry-rhel8-operator",
              "product": "Red Hat build of Apicurio Registry 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:apicurio_registry:3"
              ],
              "defaultStatus": "unaffected",
              "packageName": "apicurio/apicurio-registry-rhel8-operator",
              "product": "Red Hat build of Apicurio Registry 3",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:jboss_fuse:7"
              ],
              "defaultStatus": "affected",
              "packageName": "fuse7/fuse-apicurito-rhel8-operator",
              "product": "Red Hat Fuse 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "compliance/openshift-compliance-rhel8-operator",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift4/cnf-tests-rhel8",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift4/cnf-tests-rhel9",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openshift4/lifecycle-agent-operator-bundle",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openshift4/topology-aware-lifecycle-manager-operator-bundle",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift4/ztp-site-generate-rhel8",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "affected",
              "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm-rhel9",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status-rhel9",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:webterminal:1"
              ],
              "defaultStatus": "unaffected",
              "packageName": "web-terminal/web-terminal-exec-rhel9",
              "product": "Red Hat Web Terminal",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:webterminal:1"
              ],
              "defaultStatus": "unaffected",
              "packageName": "web-terminal/web-terminal-rhel9-operator",
              "product": "Red Hat Web Terminal",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Antony Di Scala, James Force, and Michael Whale for reporting this issue."
            }
          ],
          "datePublic": "2025-08-07T18:59:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. \n\nIn affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Moderate"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-276",
                  "description": "Incorrect Default Permissions",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-25T23:26:57.983Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHEA-2025:23406",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHEA-2025:23406"
            },
            {
              "name": "RHEA-2025:23478",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHEA-2025:23478"
            },
            {
              "name": "RHEA-2026:0129",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHEA-2026:0129"
            },
            {
              "name": "RHSA-2025:19332",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:19332"
            },
            {
              "name": "RHSA-2025:19335",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:19335"
            },
            {
              "name": "RHSA-2025:19958",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:19958"
            },
            {
              "name": "RHSA-2025:19961",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:19961"
            },
            {
              "name": "RHSA-2025:21368",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:21368"
            },
            {
              "name": "RHSA-2025:21885",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:21885"
            },
            {
              "name": "RHSA-2025:22415",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22415"
            },
            {
              "name": "RHSA-2025:22416",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22416"
            },
            {
              "name": "RHSA-2025:22418",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22418"
            },
            {
              "name": "RHSA-2025:22420",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22420"
            },
            {
              "name": "RHSA-2025:22683",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22683"
            },
            {
              "name": "RHSA-2025:22684",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22684"
            },
            {
              "name": "RHSA-2025:23528",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:23528"
            },
            {
              "name": "RHSA-2025:23529",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:23529"
            },
            {
              "name": "RHSA-2025:23542",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:23542"
            },
            {
              "name": "RHSA-2026:0627",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:0627"
            },
            {
              "name": "RHSA-2026:0718",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:0718"
            },
            {
              "name": "RHSA-2026:0722",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:0722"
            },
            {
              "name": "RHSA-2026:0737",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:0737"
            },
            {
              "name": "RHSA-2026:2572",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:2572"
            },
            {
              "name": "RHSA-2026:5633",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:5633"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2025-7195"
            },
            {
              "name": "RHBZ#2376300",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376300"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2025-07-04T08:54:01.878Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2025-08-07T18:59:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd",
          "workarounds": [
            {
              "lang": "en",
              "value": "In Red Hat OpenShift Container Platform, the following default configurations reduce the impact of this vulnerability.\n\nSecurity Context Constraints (SCCs): The default SCC, Restricted-v2, applies several crucial security settings to containers. \n\nCapabilities: drop: ALL removes all Linux capabilities, including SETUID and SETGID. This prevents a process from changing its user or group ID, a common step in privilege escalation attacks. The SETUID and SETGID capabilities can also be dropped explicitly if other capabilities are still required.\n\nallowPrivilegeEscalation: false ensures that a process cannot gain more privileges than its parent process. This blocks attempts by a compromised container process to grant itself additional capabilities.\n\nSELinux Mandatory Access Control (MAC): Pods are required to run with a pre-allocated Multi-Category Security (MCS) label. This SELinux feature provides a strong layer of isolation between containers and from the host system. A properly configured SELinux policy can prevent a container escape, even if an attacker gains elevated permissions within the container itself.\n\nFilesystem Hardening: While not a default setting, a common security practice is to set readOnlyRootFilesystem: true in a container\u0027s security context. In this specific scenario, this configuration would prevent an attacker from modifying critical files like /etc/passwd, even if they managed to gain file-level write permissions."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-276: Incorrect Default Permissions"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2025-7195",
        "datePublished": "2025-08-07T19:05:08.756Z",
        "dateReserved": "2025-07-07T08:45:21.278Z",
        "dateUpdated": "2026-06-25T23:26:57.983Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-4645 (GCVE-0-2026-4645)

    Vulnerability from cvelistv5 – Published: 2026-03-23 13:35 – Updated: 2026-03-30 08:01
    VLAI

    Duplicate of CVE-2026-32287

    Show details on NVD website

    {
      "containers": {
        "cna": {
          "providerMetadata": {
            "dateUpdated": "2026-03-30T08:01:39.710Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "rejectedReasons": [
            {
              "lang": "en",
              "value": "Duplicate of CVE-2026-32287"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-4645",
        "datePublished": "2026-03-23T13:35:22.985Z",
        "dateRejected": "2026-03-30T08:01:39.710Z",
        "dateReserved": "2026-03-23T12:21:39.096Z",
        "dateUpdated": "2026-03-30T08:01:39.710Z",
        "state": "REJECTED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2025-7195 (GCVE-0-2025-7195)

    Vulnerability from cvelistv5 – Published: 2025-08-07 19:05 – Updated: 2026-06-25 23:26
    VLAI
    Title
    Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd
    Summary
    Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. In affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-276 - Incorrect Default Permissions
    Assigner
    References
    URL Tags
    https://access.redhat.com/errata/RHEA-2025:23406 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHEA-2025:23478 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHEA-2026:0129 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:19332 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:19335 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:19958 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:19961 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:21368 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:21885 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22415 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22416 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22418 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22420 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22683 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:22684 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:23528 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:23529 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:23542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:0627 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:0718 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:0722 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:0737 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2572 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:5633 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2025-7195 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2376300 issue-trackingx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    operator-framework operator-sdk Affected: 0 , < 0.15.2 (semver)
    Create a notification for this product.
    Red Hat RHEL-9-CNV-4.17 Unaffected: v4.17.39-2 , < * (rpm)
        cpe:/a:redhat:container_native_virtualization:4.17::el9
    Create a notification for this product.
    Red Hat RHEL-9-CNV-4.18 Unaffected: v4.18.25-3 , < * (rpm)
        cpe:/a:redhat:container_native_virtualization:4.18::el9
    Create a notification for this product.
    Red Hat RHEL-9-CNV-4.20 Unaffected: v4.20.3-3 , < * (rpm)
        cpe:/a:redhat:container_native_virtualization:4.20::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: v2.6 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.7 Unaffected: v2.7 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.7::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765872406 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1766360304 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765669648 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765866268 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765872399 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765872402 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765872398 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1765872400 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: v2.9 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat OpenShift Compliance Operator 1 Unaffected: 1.8.0 , < * (rpm)
        cpe:/a:redhat:openshift_compliance_operator:1::el9
    Create a notification for this product.
    Red Hat OpenShift Compliance Operator 1 Unaffected: 1768172669 , < * (rpm)
        cpe:/a:redhat:openshift_compliance_operator:1::el9
    Create a notification for this product.
    Red Hat OpenShift File Integrity Operator - FIO 1 Unaffected: v1.3 , < * (rpm)
        cpe:/a:redhat:openshift_file_integrity_operator:1::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 Unaffected: v2.11 , < * (rpm)
        cpe:/a:redhat:acm:2.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: v2.12 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: 1773285089 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: 1773259164 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: 1773259182 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: 1773358651 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 Unaffected: 1773090513 , < * (rpm)
        cpe:/a:redhat:acm:2.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1767569821 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1767829032 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1767656229 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: v2.14 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1769720041 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1770343757 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1769721579 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1770336554 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178221 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178222 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178236 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178273 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178715 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178261 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178354 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178419 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178768 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178319 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178386 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178406 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178615 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178379 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178329 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764178423 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.14 Unaffected: v4.14-1764215448 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.14::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176261 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176342 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176372 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176892 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176485 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176698 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176699 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176675 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764177101 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176690 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764221806 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764222436 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764177174 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764177033 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764176958 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764177020 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.15 Unaffected: v4.15-1764177029 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764168955 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169118 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169242 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169544 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169347 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169479 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169526 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169464 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169687 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169457 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169527 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169577 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169730 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169598 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169623 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764169710 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764170019 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.16 Unaffected: v4.16-1764170021 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764167834 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764167795 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764167826 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764167876 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168179 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764167987 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168476 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168475 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168431 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168662 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168536 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168609 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168731 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168699 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764168859 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764169063 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764169125 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.17 Unaffected: v4.17-1764169222 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854289 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854280 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854319 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761855549 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854321 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854422 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854430 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854457 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854484 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854398 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854494 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854493 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854504 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854489 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761855467 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761854524 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1762335558 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: v4.18-1761855234 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Multicluster Engine for Kubernetes     cpe:/a:redhat:multicluster_engine
    Create a notification for this product.
    Red Hat Multicluster Global Hub     cpe:/a:redhat:multicluster_globalhub
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2     cpe:/a:redhat:acm:2
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4     cpe:/a:redhat:advanced_cluster_security:4
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Web Terminal     cpe:/a:redhat:webterminal:1
    Create a notification for this product.
    Date Public
    2025-08-07 18:59
    Credits
    Red Hat would like to thank Antony Di Scala, James Force, and Michael Whale for reporting this issue.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-7195",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-08-07T19:23:11.314765Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-08-07T19:36:47.691Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://github.com/operator-framework/operator-sdk",
              "defaultStatus": "unaffected",
              "packageName": "operator-sdk",
              "product": "operator-sdk",
              "vendor": "operator-framework",
              "versions": [
                {
                  "lessThan": "0.15.2",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9",
              "product": "RHEL-9-CNV-4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17.39-2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9",
              "product": "RHEL-9-CNV-4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18.25-3",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4.20::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9",
              "product": "RHEL-9-CNV-4.20",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.20.3-3",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/addon-manager-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/discovery-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/placement-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-operator-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.6::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/work-rhel9",
              "product": "multicluster engine for Kubernetes 2.6",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/addon-manager-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/discovery-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/placement-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-operator-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/work-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/addon-manager-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/discovery-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/placement-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-operator-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.7::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/work-rhel9",
              "product": "multicluster engine for Kubernetes 2.7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.7",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/addon-manager-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765872406",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1766360304",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/discovery-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765669648",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765866268",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/placement-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765872399",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-operator-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765872402",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765872398",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.8::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/work-rhel9",
              "product": "multicluster engine for Kubernetes 2.8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1765872400",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/addon-manager-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/discovery-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/placement-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-operator-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/registration-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine:2.9::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/work-rhel9",
              "product": "multicluster engine for Kubernetes 2.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_compliance_operator:1::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "compliance/openshift-compliance-rhel8-operator",
              "product": "OpenShift Compliance Operator 1",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1.8.0",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_compliance_operator:1::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "compliance/openshift-compliance-rhel8-operator",
              "product": "OpenShift Compliance Operator 1",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1768172669",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_file_integrity_operator:1::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "compliance/openshift-file-integrity-rhel8-operator",
              "product": "OpenShift File Integrity Operator - FIO 1",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v1.3",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.11::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.11",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.11::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-application-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.11",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.11::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-channel-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.11",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.11::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.11",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/acm-cluster-permission-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicloud-integrations-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-application-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-channel-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.12",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/acm-cluster-permission-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1773285089",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicloud-integrations-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1773259164",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-application-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1773259182",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-channel-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1773358651",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.12::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1773090513",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.13::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/acm-cluster-permission-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1767569821",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.13::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1767829032",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.13::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/acm-cluster-permission-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1767569821",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.13::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/cluster-backup-rhel9-operator",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1767656229",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.13::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1767829032",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/acm-cluster-permission-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicloud-integrations-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-application-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-channel-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v2.14",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicloud-integrations-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1769720041",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-application-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1770343757",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-channel-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1769721579",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:acm:2.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1770336554",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178221",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-cli-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178222",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-core-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178236",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178273",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178715",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178261",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-metrics-exporter-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178354",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178419",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178768",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cosi-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178319",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178386",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178406",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178615",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178379",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-must-gather-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178329",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178423",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odr-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764178419",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/rook-ceph-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.14-1764215448",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176261",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-core-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176342",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176372",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176892",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176485",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-metrics-exporter-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176698",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176699",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cli-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176675",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177101",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cosi-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176690",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764221806",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764222436",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177174",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177033",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-must-gather-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764176958",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177101",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odr-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177020",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/rook-ceph-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.15-1764177029",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764168955",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-core-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169118",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169242",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169544",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169347",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-metrics-exporter-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169479",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169526",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cli-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169464",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169687",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cosi-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169457",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169527",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169577",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169730",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169598",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-must-gather-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169623",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764169710",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odr-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764170019",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/rook-ceph-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.16-1764170021",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764167834",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764167795",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-core-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764167826",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764167876",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168179",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764167987",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-metrics-exporter-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168476",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168475",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cli-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168431",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168662",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cosi-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168475",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168536",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168609",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168731",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168699",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-must-gather-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764168859",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764169063",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odr-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764169125",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/rook-ceph-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.17-1764169222",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854289",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/cephcsi-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854280",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-core-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854280",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/mcg-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854319",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761855549",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-client-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854321",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-metrics-exporter-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854422",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/ocs-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854430",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cli-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854457",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854484",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-cosi-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854398",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854494",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854493",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-console-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854504",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-multicluster-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854489",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-must-gather-rhel9",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761855467",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odf-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761854524",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/odr-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1762335558",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "odf4/rook-ceph-rhel9-operator",
              "product": "Red Hat Openshift Data Foundation 4.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "v4.18-1761855234",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/addon-manager-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-engine/discovery-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/hypershift-addon-rhel8-operator",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "affected",
              "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-engine/managedcluster-import-controller-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/placement-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/registration-operator-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/registration-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_engine"
              ],
              "defaultStatus": "unknown",
              "packageName": "multicluster-engine/work-rhel8",
              "product": "Multicluster Engine for Kubernetes",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_globalhub"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
              "product": "Multicluster Global Hub",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_globalhub"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9",
              "product": "Multicluster Global Hub",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:multicluster_globalhub"
              ],
              "defaultStatus": "unaffected",
              "packageName": "multicluster-globalhub/multicluster-globalhub-rhel9-operator",
              "product": "Multicluster Global Hub",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "rhacm2/acm-cluster-permission-rhel8",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/cert-policy-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/config-policy-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/endpoint-monitoring-rhel9-operator",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/governance-policy-propagator-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/grafana-dashboard-loader-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/iam-policy-controller-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "rhacm2/klusterlet-addon-controller-rhel8",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/metrics-collector-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "rhacm2/multicloud-integrations-rhel8",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/multicluster-observability-rhel9-operator",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "rhacm2/multicluster-operators-application-rhel8",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "rhacm2/multicluster-operators-channel-rhel8",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/rbac-query-proxy-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:acm:2"
              ],
              "defaultStatus": "unaffected",
              "packageName": "rhacm2/search-collector-rhel9",
              "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:advanced_cluster_security:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
              "product": "Red Hat Advanced Cluster Security 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:service_registry:2"
              ],
              "defaultStatus": "unknown",
              "packageName": "apicurio/apicurio-registry-rhel8-operator",
              "product": "Red Hat build of Apicurio Registry 2",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:apicurio_registry:3"
              ],
              "defaultStatus": "unaffected",
              "packageName": "apicurio/apicurio-registry-rhel8-operator",
              "product": "Red Hat build of Apicurio Registry 3",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:jboss_fuse:7"
              ],
              "defaultStatus": "affected",
              "packageName": "fuse7/fuse-apicurito-rhel8-operator",
              "product": "Red Hat Fuse 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "compliance/openshift-compliance-rhel8-operator",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift4/cnf-tests-rhel8",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift4/cnf-tests-rhel9",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openshift4/lifecycle-agent-operator-bundle",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openshift4/topology-aware-lifecycle-manager-operator-bundle",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift4/ztp-site-generate-rhel8",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "affected",
              "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm-rhel9",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:container_native_virtualization:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status-rhel9",
              "product": "Red Hat OpenShift Virtualization 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:webterminal:1"
              ],
              "defaultStatus": "unaffected",
              "packageName": "web-terminal/web-terminal-exec-rhel9",
              "product": "Red Hat Web Terminal",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:webterminal:1"
              ],
              "defaultStatus": "unaffected",
              "packageName": "web-terminal/web-terminal-rhel9-operator",
              "product": "Red Hat Web Terminal",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Antony Di Scala, James Force, and Michael Whale for reporting this issue."
            }
          ],
          "datePublic": "2025-08-07T18:59:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. \n\nIn affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Moderate"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-276",
                  "description": "Incorrect Default Permissions",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-25T23:26:57.983Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHEA-2025:23406",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHEA-2025:23406"
            },
            {
              "name": "RHEA-2025:23478",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHEA-2025:23478"
            },
            {
              "name": "RHEA-2026:0129",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHEA-2026:0129"
            },
            {
              "name": "RHSA-2025:19332",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:19332"
            },
            {
              "name": "RHSA-2025:19335",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:19335"
            },
            {
              "name": "RHSA-2025:19958",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:19958"
            },
            {
              "name": "RHSA-2025:19961",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:19961"
            },
            {
              "name": "RHSA-2025:21368",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:21368"
            },
            {
              "name": "RHSA-2025:21885",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:21885"
            },
            {
              "name": "RHSA-2025:22415",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22415"
            },
            {
              "name": "RHSA-2025:22416",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22416"
            },
            {
              "name": "RHSA-2025:22418",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22418"
            },
            {
              "name": "RHSA-2025:22420",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22420"
            },
            {
              "name": "RHSA-2025:22683",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22683"
            },
            {
              "name": "RHSA-2025:22684",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:22684"
            },
            {
              "name": "RHSA-2025:23528",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:23528"
            },
            {
              "name": "RHSA-2025:23529",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:23529"
            },
            {
              "name": "RHSA-2025:23542",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:23542"
            },
            {
              "name": "RHSA-2026:0627",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:0627"
            },
            {
              "name": "RHSA-2026:0718",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:0718"
            },
            {
              "name": "RHSA-2026:0722",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:0722"
            },
            {
              "name": "RHSA-2026:0737",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:0737"
            },
            {
              "name": "RHSA-2026:2572",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:2572"
            },
            {
              "name": "RHSA-2026:5633",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:5633"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2025-7195"
            },
            {
              "name": "RHBZ#2376300",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376300"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2025-07-04T08:54:01.878Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2025-08-07T18:59:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd",
          "workarounds": [
            {
              "lang": "en",
              "value": "In Red Hat OpenShift Container Platform, the following default configurations reduce the impact of this vulnerability.\n\nSecurity Context Constraints (SCCs): The default SCC, Restricted-v2, applies several crucial security settings to containers. \n\nCapabilities: drop: ALL removes all Linux capabilities, including SETUID and SETGID. This prevents a process from changing its user or group ID, a common step in privilege escalation attacks. The SETUID and SETGID capabilities can also be dropped explicitly if other capabilities are still required.\n\nallowPrivilegeEscalation: false ensures that a process cannot gain more privileges than its parent process. This blocks attempts by a compromised container process to grant itself additional capabilities.\n\nSELinux Mandatory Access Control (MAC): Pods are required to run with a pre-allocated Multi-Category Security (MCS) label. This SELinux feature provides a strong layer of isolation between containers and from the host system. A properly configured SELinux policy can prevent a container escape, even if an attacker gains elevated permissions within the container itself.\n\nFilesystem Hardening: While not a default setting, a common security practice is to set readOnlyRootFilesystem: true in a container\u0027s security context. In this specific scenario, this configuration would prevent an attacker from modifying critical files like /etc/passwd, even if they managed to gain file-level write permissions."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-276: Incorrect Default Permissions"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2025-7195",
        "datePublished": "2025-08-07T19:05:08.756Z",
        "dateReserved": "2025-07-07T08:45:21.278Z",
        "dateUpdated": "2026-06-25T23:26:57.983Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }