FusionSphere OpenStack vulnerabilities | LiveThreat CVE Feed

Product

FusionSphere OpenStack

by Huawei Technologies Co., Ltd. · last CVE Nov 27, 2018

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities20 In the news0 Timeline

Severity mix

Critical 0High 14Medium 5Low 1

Severity

All severities20 Critical0 High14 Medium5 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add FusionSphere OpenStack to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-8195	8.8	1%	Nov 22	The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability Affected: V100R006C00SPC102(NFV)
CVE-2017-8194	8.8	1%	Nov 22	The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability Affected: V100R006C00SPC102(NFV)
CVE-2017-2719	8.8	1%	Nov 22	FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port Affected: V100R006C00£ ¬ V100R006C10RC2
CVE-2017-2718	8.8	1%	Nov 22	FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port Affected: V100R006C00£ ¬ V100R006C10RC2
CVE-2017-8131	8.8	1%	Nov 22	The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports Affected: V100R006C00 and V100R006C10
CVE-2017-8132	8.8	1%	Nov 22	The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports Affected: V100R006C00 and V100R006C10
CVE-2017-8134	8.8	1%	Nov 22	The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports Affected: V100R006C00 and V100R006C10
CVE-2017-8135	8.8	1%	Nov 22	The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports Affected: V100R006C00 and V100R006C10
CVE-2017-8193	8.0	1%	Nov 22	The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability Affected: V100R006C00SPC102(NFV)
CVE-2017-2714	8.0	1%	Nov 22	The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability Affected: V100R005C10SPC705 and earlier versions
CVE-2017-8192	7.8	0%	Nov 22	FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability Affected: V100R006C00
CVE-2018-7977	7.5	1%	Nov 27	There is an information leakage vulnerability on several Huawei products Affected: V100R006C00
CVE-2017-8187	7.2	1%	Mar 20	Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) has a privilege escalation vulnerability Affected: V100R006C00SPC102(NFV)
CVE-2017-8188	7.2	2%	Nov 22	FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability Affected: V100R006C00SPC102(NFV)
CVE-2017-8190	6.7	0%	Nov 22	FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability Affected: V100R006C00SPC102(NFV)
CVE-2017-8189	6.0	0%	Nov 22	FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability Affected: V100R006C00SPC102(NFV)
CVE-2017-8191	5.9	1%	Nov 22	FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability Affected: V100R006C00SPC102(NFV)
CVE-2017-2720	5.3	1%	Nov 22	FusionSphere OpenStack V100R006C00 has an information exposure vulnerability Affected: V100R006C00
CVE-2017-8168	4.3	0%	Nov 22	FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability Affected: V100R006C00SPC102(NFV),V100R006C10
CVE-2017-15321	3.7	1%	Dec 22	Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default Affected: V100R006C000SPC102 (NFV)