OP
Product
Openstack Platform
38
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 15Medium 20Low 2
Watch
Add Openstack Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2132 | 8.6 | Aug 31 | A permissive list of allowed inputs flaw was found in DPDK Affected: 13.0 |
| CVE-2023-1668 | 8.2 | Apr 10 | A flaw was found in openvswitch (OVS) Affected: 16.1; 16.2; 17.0 |
| CVE-2024-8007 | 8.1 | Aug 21 | A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director Affected: 16.1; 16.2; 17.1 |
| CVE-2022-23451 | 8.1 | Sep 6 | An authorization flaw was found in openstack-barbican Affected: 13.0; 16.1; 16.2 |
| CVE-2017-15114 | 8.1 | Nov 27 | When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services Affected: 12.0 |
| CVE-2023-5625 | 7.5 | Nov 1 | A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied… Affected: 17.1 |
| CVE-2022-3596 | 7.5 | Sep 20 | An information leak was found in OpenStack's undercloud Affected: 13.0; 13.0 |
| CVE-2022-3261 | 7.5 | Sep 15 | A flaw was found in OpenStack Affected: 16.2 |
| CVE-2023-1108 | 7.5 | Sep 14 | A flaw was found in undertow Affected: 13.0 |
| CVE-2023-3354 | 7.5 | Jul 11 | A flaw was found in the QEMU built-in VNC server Affected: 13.0 |
| CVE-2021-20270 | 7.5 | Mar 23 | An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as… Affected: 10.0 |
| CVE-2021-3563 | 7.4 | Aug 26 | A flaw was found in openstack-keystone Affected: 10.0; 13.0; 16.1; 16.2 |
| CVE-2021-20267 | 7.1 | May 28 | A flaw was found in openstack-neutron's default Open vSwitch firewall rules Affected: 10.0; 13.0; 16.1; 16.2 |
| CVE-2020-27781 | 7.1 | Dec 18 | User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation Affected: 13.0 |
| CVE-2020-14365 | 7.1 | Sep 23 | A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module Affected: 10.0; 13.0 |
Showing 15