Login Request a demo
KE
Product
Keystone
by OpenStack · last CVE Sep 11, 2026
49
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities49In the news0Timeline
Severity mix
Critical 0High 18Medium 7Low 0
Severity
All severities49Critical0High18Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Keystone to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-2447
6.6
1%
Sep 1
A flaw was found in Keystone
Affected: All versions, or not specified
CVE-2013-0270
6.5
3%
Apr 12
A flaw was found in OpenStack Keystone
Affected: 2012.1 through 2012.1.3; 2012.2 through 2012.2.4; 2013.1; 2013.1; 2013.1
CVE-2013-2255
5.9
1%
Nov 1
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates
Affected: 2013
CVE-2020-12692
5.4
1%
May 7
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0
Affected: before 15.0.1; 16.0.0
CVE-2026-33551
5.3
0%
Apr 10
An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0
Affected: 14.0.0 before 26.1.1; 27.0.0; 28.0.0; 29.0.0
CVE-2018-20170
5.3
1%
Dec 17
OpenStack Keystone through 14.0.1 has a user enumeration vulnerability because invalid usernames have much faster responses than valid ones for a POST /v3/auth/tokens request
Affected: through 14.0.1
CVE-2018-14432
5.3
2%
Jul 31
In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access…
Affected: before 11.0.4; 12.0.0; 13.0.0
Showing 7