Skip to contentOpenstack vulnerabilities
Newest
- opennms horizon, meridian +1 moreAuthenticated XXE Injection Via The File EditorCVE-2023-406125.3 Medium
- openstack horizonHorizon Web Dashboard Open Redirect vulnerabilityCVE-2022-45582Fix available6.1 Medium
- opennms horizon, meridian +1 moreROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMINCVE-2023-40315Public exploitFix available5.3 Medium
- opennms horizon, meridian +1 moreDisable BeanShell Interpreter Remote Server ModeCVE-2023-40313Fix available7.1 High
- keystonejs keystoneConditionally missing authorization in @keystone-6/coreCVE-2023-40027Fix available3.7 Low
- opennms horizon, meridian +1 moreReflected XSS in multiple JSP files in opennms/opennmsCVE-2023-40312Fix available6.7 Medium
- opennms horizon, meridian +1 moreStored XSS in multiple JSP files in opennms/opennmsCVE-2023-40311Fix available6.7 Medium
- opennms horizon, meridian +1 moreROLE_REST can be used to escalate to ROLE_ADMIN via /rest/usersCVE-2023-0872Public exploitFix available8.2 High
- opennms horizon, meridian +1 moreAn XML External Entity injection vulnerabilityCVE-2023-0871Fix available5.4 Medium
- keystonejs keystone@keystone-6/auth Open Redirect vulnerabilityCVE-2023-34247Fix available6.1 Medium
- openstack heat, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreInformation leak in apiCVE-2023-1625Fix available7.4 High
- red hat tripleo-ansible, redhat openstack, openstack tripleo ansible +1 more +3 moretripleo-ansible may disclose important configuration details from an OpenStack deploymentCVE-2022-31465.5 Medium
- red hat tripleo-ansible, redhat openstack, openstack tripleo ansible +1 more +3 moretripleo-ansible may disclose important configuration details from an OpenStack deploymentCVE-2022-31015.5 Medium
- opennms horizon, meridian +1 moreForm Can Be Manipulated with Cross-Site Request Forgery (CSRF)CVE-2023-0870Fix available8.1 High
- openstack glance, redhat openstack +1 moreOpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerabilityCVE-2022-41342.8 Low
- openstack neutron, the openstack project openstack-neutron, redhat openstack platform +2 moreopenstack-neutron uncontrolled resource consumption flawCVE-2022-3277Fix available6.5 Medium
- opennms horizon, meridian +1 morePlaintext Password Present in the Web logsCVE-2023-0815Fix available6.8 Medium
- opennms horizon, meridian +1 moreMultiple stored and reflected Cross-site Scripting in webappCVE-2023-0867Fix available6.7 Medium
- opennms horizon, meridian +1 moreStealing Cookies using Reflected XSS via graph resultsCVE-2023-0868Fix available6.7 Medium
- opennms horizon, meridian +1 moreCross-site scripting in outage/list.htmCVE-2023-08695.8 Medium
- opennms horizon, meridian +1 moreUnauthenticated, stored XSS in display of alarm reduction-keyCVE-2023-0846Fix available6.7 Medium
- glance project glancePath traversal vulnerability in glanceCVE-2022-25937Fix available6.5 Medium
- openstack cinder, glance, nova +1 more +3 moreOpenStack Cinder, glance, and Nova vulnerable to Path TraversalCVE-2022-47951Fix available5.7 Medium
- openstack swift, debian linux +1 moreOpenStack Swift XML external entities (XXE) InjectionCVE-2022-47950Fix available6.5 Medium
- openstack kolla, openstack +1 moreOpenStack Kolla sudo privilege escalation vulnerabilityCVE-2022-38060Fix available8.8 High
- openstackA privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git...CVE-2022-380658.8 High
- keystonejs keystoneNODE_ENV in Keystone defaults to development with esbuildCVE-2022-39382Fix available9.8 Critical
- keystonejs keystone@keystone-6/core vulnerable to field-level access-control bypass for multiselect fieldCVE-2022-39322Fix available9.1 Critical
- openstack barbican, redhat openstack, red hat openstack platform +1 more +3 moreA flaw was found in the openstack-barbican component. This issue allows an access policy bypass...CVE-2022-3100Fix available5.9 Medium
- openstack keystone, [unknown] openstack-keystone, redhat openstack platform +2 more +4 moreA flaw was found in OpenStack. The application credential tokens can be used even after they have...CVE-2022-2447Fix available6.6 Medium
- openstack tripleo heat templatesA flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs...CVE-2021-35855.5 Medium
- openstack keystone, debian linux, redhat openstack platform +2 moreOpenstack Keystone Incorrect Authorization vulnerabilityCVE-2021-3563Fix available7.4 High
- openstack novaOpenStack Nova Changing vnic_type breaks compute service restartCVE-2022-37394Fix available3.3 Low
- [unknown] openstack-tripleo-heat-templates, redhat openstack, openstack tripleo heat templates +2 moreExposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templatesCVE-2021-4180Fix available4.3 Medium
- debian linux, openstack oslo.utils, redhat openshift container platform +1 more +3 morepython-oslo-utils has improper password parsingCVE-2022-0718Fix available4.9 Medium
- openstack nova, openstack-nova, redhat openstack platform +2 moreOpen Redirect in CPython that affects users of OpenStack NovaCVE-2021-3654Fix availableEPSS 26.8%6.1 Medium
- openstack barbican, redhat openstack platform +1 moreopenstack-barbican Denial of Service vulnerabilityCVE-2022-23452Fix available4.9 Medium
- openstack barbican, redhat openstack platform +1 moreBarbican authorization flaw before v14.0.0CVE-2022-23451Fix available8.1 High
- openstack neutronOpenStack Neutron Denial of Service vulnerabilityCVE-2021-40797Fix available6.5 Medium
- openstack neutron, debian linux +1 moreOpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts valueCVE-2021-40085Fix available6.5 Medium
- openstack neutronOpenStack Neutron vulnerable to hardware address impersonationCVE-2021-38598Fix available9.1 Critical
- openstack keystoneOpenStack Keystone allows information disclosure during account lockingCVE-2021-38155Fix available7.5 High
- openstack swiftTemporary urls leaked via loggingCVE-2017-8761Fix available4.3 Medium
- openstack neutron, the openstack project openstack-neutron, redhat openstack platform +2 moreOpenstack Neutron has Insufficient Verification of IPv6 addressesCVE-2021-20267Fix available7.1 High
- openstack horizon, debian linux +1 moreOpenStack Horizon Open redirect in workflow formsCVE-2020-29565Fix available6.1 Medium
- openstack blazar-dashboardArbitrary Code Execution in blazar-dashboardCVE-2020-26943Fix available9.9 Critical
- openstack novaOpenStack Nova Live migration fails to update persistent domain XMLCVE-2020-17376Fix available8.3 High
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone does not check signature TTL of the EC2 credential auth methodCVE-2020-12692Fix available5.4 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project IDCVE-2020-12691Fix available8.8 High
- openstack keystoneInsufficient Session Expiration in OpenStack KeystoneCVE-2020-12690Fix available8.8 High
- Show moreLoading…