OP
Product
Openstack Platform
38
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 15Medium 20Low 2
Watch
Add Openstack Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2447 | 6.6 | Sep 1 | A flaw was found in Keystone Affected: 16.1; 16.2 |
| CVE-2023-3637 | 6.5 | Jul 25 | An uncontrolled resource consumption flaw was found in openstack-neutron Affected: 13.0; 16.2 |
| CVE-2022-3277 | 6.5 | Mar 6 | An uncontrolled resource consumption flaw was found in openstack-neutron Affected: 13.0; 16.1; 16.2 |
| CVE-2021-3979 | 6.5 | Aug 25 | A key length flaw was found in Red Hat Ceph Storage Affected: 13.0 |
| CVE-2021-20257 | 6.5 | Mar 16 | An infinite loop flaw was found in the e1000 NIC emulator of the QEMU Affected: 10.0; 13.0 |
| CVE-2020-1690 | 6.5 | Jun 7 | An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container from privilege escalation Affected: 15.0; 16.1 |
| CVE-2019-12067 | 6.5 | Jun 2 | The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null Affected: 10.0; 14.0 |
| CVE-2023-1932 | 6.1 | Nov 7 | A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by… Affected: 13.0 |
| CVE-2021-3654 | 6.1 | Mar 2 | A vulnerability was found in openstack-nova's console proxy, noVNC Affected: 16.1; 16.2 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: 16.1; 16.2; 17.1 |
| CVE-2022-3100 | 5.9 | Jan 18 | A flaw was found in the openstack-barbican component Affected: 13.0 |
| CVE-2020-25658 | 5.9 | Nov 12 | It was found that python-rsa is vulnerable to Bleichenbacher timing attacks Affected: 13.0; 16.0 |
| CVE-2023-6725 | 5.5 | Mar 15 | An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable Affected: 17.1 |
| CVE-2023-1633 | 5.5 | Sep 24 | A credentials leak flaw was found in OpenStack Barbican Affected: 16.1; 16.2; 17.0 |
| CVE-2022-0866 | 5.3 | May 10 | This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a RunAs principal Affected: 13.0 |
| CVE-2024-7319 | 5.0 | Aug 2 | An incomplete fix for CVE-2023-1625 was found in openstack-heat Affected: 13.0; 16.1; 16.2; 17.0 |
| CVE-2023-1636 | 5.0 | Sep 24 | A vulnerability was found in OpenStack Barbican containers Affected: 16.1; 16.2; 17.0 |
| CVE-2023-1625 | 5.0 | Sep 24 | An information leak was discovered in OpenStack heat Affected: 13.0; 16.1; 16.2; 17.0 |
| CVE-2022-23452 | 4.9 | Sep 1 | An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container Affected: 16.1 |
| CVE-2022-0718 | 4.9 | Aug 29 | A flaw was found in python-oslo-utils Affected: 16.1 |
Showing 20