Fusionsphere Openstack vulnerabilities | LiveThreat CVE Feed

Product

Fusionsphere Openstack

by Huawei · last CVE Aug 11, 2020

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities21 In the news0 Timeline

Severity mix

Critical 0High 15Medium 5Low 1

Severity

All severities21 Critical0 High15 Medium5 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Fusionsphere Openstack to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-9079	8.8	0%	Aug 11	FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability Affected: 8.0.0
CVE-2017-8195	8.8	1%	Nov 22	The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability Affected: v100r006c00spc102(nfv)
CVE-2017-8194	8.8	1%	Nov 22	The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability Affected: v100r006c00spc102(nfv)
CVE-2017-8135	8.8	1%	Nov 22	The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports Affected: v100r006c00; v100r006c10
CVE-2017-8134	8.8	1%	Nov 22	The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports Affected: v100r006c00; v100r006c10
CVE-2017-8132	8.8	1%	Nov 22	The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports Affected: v100r006c00; v100r006c10
CVE-2017-8131	8.8	1%	Nov 22	The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports Affected: v100r006c00; v100r006c10
CVE-2017-2719	8.8	1%	Nov 22	FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port Affected: v100r006c00; v100r006c10rc2
CVE-2017-2718	8.8	1%	Nov 22	FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port Affected: v100r006c00; v100r006c10
CVE-2017-8193	8.0	1%	Nov 22	The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability Affected: v100r006c00spc102(nfv)
CVE-2017-2714	8.0	1%	Nov 22	The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability Affected: through v100r005c10spc705
CVE-2020-9225	7.8	0%	Jun 18	FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability Affected: 6.5.1
CVE-2017-8192	7.8	0%	Nov 22	FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability Affected: v100r006c00
CVE-2018-7977	7.5	1%	Nov 27	There is an information leakage vulnerability on several Huawei products Affected: 100r006c00
CVE-2017-8188	7.2	2%	Nov 22	FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability Affected: v100r006c00spc102(nfv)
CVE-2017-8190	6.7	0%	Nov 22	FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability Affected: v100r006c00spc102(nfv)
CVE-2017-8189	6.0	0%	Nov 22	FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability Affected: v100r006c00spc102(nfv)
CVE-2017-8191	5.9	1%	Nov 22	FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability Affected: v100r006c00spc102(nfv)
CVE-2017-2720	5.3	1%	Nov 22	FusionSphere OpenStack V100R006C00 has an information exposure vulnerability Affected: v100r006c00
CVE-2017-8168	4.3	0%	Nov 22	FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability Affected: v100r006c00spc102(nfv); v100r006c10
CVE-2017-15321	3.7	1%	Dec 22	Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default Affected: v100r006c000spc102_(nfv)