Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2025-49794

🗓️ 16 Jun 2025 15:24:31Reported by redhatType 
cve
 cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 137 Views

Use-after-free vulnerability in libxml2 can cause program crash and denial of service.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
18 Dec 202501:19
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in libxml2 affect AIX/VIOS
17 Jul 202516:10
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)
3 Mar 202600:44
–ibm
IBM Security Bulletins		Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to a use-after-free vulnerability due to the libxml2 package (CVE-2025-49794)
2 Sep 202514:33
–ibm
IBM Security Bulletins		Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
7 Aug 202508:11
–ibm
IBM Security Bulletins		Security Bulletin: Security vulnerabilities due to libxml2, python3, pam and glibc  packages shipped with IBM CICS TX Advanced.
12 Aug 202511:56
–ibm
IBM Security Bulletins		Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak
20 Oct 202522:01
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watsonx BI is affected by a vulnerability found in libxml2
23 Sep 202521:35
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in libxml2 affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-49795, CVE-2025-49794 and CVE-2025-49796)
3 Sep 202507:53
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
5 Sep 202519:04
–ibm
Rows per page
[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.15.0",
        "versionType": "semver"
      }
    ],
    "packageName": "libxml2",
    "collectionURL": "https://gitlab.gnome.org/GNOME/libxml2/",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.12.5-7.el10_0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.0"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.1-6.el7_9.10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_els:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-21.el8_10.1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream",
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-21.el8_10.1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream",
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-9.el8_2.3",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.2::appstream",
      "cpe:/o:redhat:rhel_aus:8.2::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-9.el8_4.6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
      "cpe:/o:redhat:rhel_aus:8.4::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-9.el8_4.6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
      "cpe:/o:redhat:rhel_aus:8.4::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-13.el8_6.10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream",
      "cpe:/a:redhat:rhel_tus:8.6::appstream",
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/o:redhat:rhel_tus:8.6::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-13.el8_6.10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream",
      "cpe:/a:redhat:rhel_tus:8.6::appstream",
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/o:redhat:rhel_tus:8.6::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-13.el8_6.10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream",
      "cpe:/a:redhat:rhel_tus:8.6::appstream",
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/o:redhat:rhel_tus:8.6::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-16.el8_8.9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream",
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-16.el8_8.9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream",
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.13-10.el9_6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.13-10.el9_6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.13-1.el9_0.5",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.0::appstream",
      "cpe:/o:redhat:rhel_e4s:9.0::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.13-3.el9_2.7",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.2::appstream",
      "cpe:/o:redhat:rhel_e4s:9.2::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.13-10.el9_4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.4::appstream",
      "cpe:/o:redhat:rhel_eus:9.4::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Core Services 2.4.62.SP2",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected",
    "packageName": "libxml2",
    "cpes": [
      "cpe:/a:redhat:jboss_core_services:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "412.86.202510291903-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.12::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.13",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "413.92.202510150118-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.13::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.14",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "414.92.202510211419-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.14::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.17",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "417.94.202510112152-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.18",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "418.94.202510230424-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.19",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "4.19.9.6.202510140714-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.20",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "4.20.9.6.202509251656-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.20::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Web Terminal 1.11 on RHEL 9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "web-terminal/web-terminal-rhel9-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.11-19",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:webterminal:1.11::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Web Terminal 1.11 on RHEL 9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "web-terminal/web-terminal-tooling-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.11-8",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:webterminal:1.11::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Web Terminal 1.12 on RHEL 9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "web-terminal/web-terminal-tooling-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.12-4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:webterminal:1.12::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-data-index-ephemeral-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-data-index-postgresql-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-db-migrator-tool-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-management-console-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-12",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-rhel8-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-18",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-swf-builder-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-swf-devmode-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-7",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "cert-manager operator for Red Hat OpenShift 1.16",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "cert-manager/jetstack-cert-manager-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v1.16.5-1760515757",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:cert_manager:1.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift File Integrity Operator - FIO 1",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "compliance/openshift-file-integrity-rhel8-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v1.3",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_file_integrity_operator:1::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Hardened Images",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "libxml2-main",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "2.15.2-0.3.hum1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:hummingbird:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Insights proxy 1.5",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "insights-proxy/insights-proxy-container-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.5.5-1754504343",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:insights_proxy:1.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
03 Jun 2026 17:02Current
9.1High risk
Vulners AI Score9.1
CVSS 3.19.1
EPSS0.00445
SSVC
CWE-825
cve 2025 vulnerabilitylibxml2 issueheap use after freedenial of servicexpath parsing flaw
137