Known vulnerabilities in OpenStack Keystone

Vendor: Openstack
Software: OpenStack Keystone
Software CPE: cpe:2.3:a:openstack:openstack_keystone:*:*:*:*:*:*:*:*
Website: https://www.openstack.org/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenStack Keystone OpenStack Keystone is affected by 9 known vulnerabilities: 1 critical, 1 high, 3 medium, 4 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125222 - Improper Access Control
CVE-2026-33551		 CWE-284 Low
No
No
 26.1.1 08.04.2026 SB2026040848
SB2026062267
#VU119968 - Insufficient Session Expiration
CVE-2022-2447		 CWE-613 Low
No
No
 - 16.12.2025 SB2022090173
SB2025121606
#VU118095 - Incorrect Authorization
CVE-2025-65073		 CWE-863 Critical
No
No
 27.0.0 05.11.2025 SB2025110502
SB2025110503
SB2025121606
and 2 more
#VU27606 - Missing Required Cryptographic Step
CVE-2020-12692		 CWE-325 Low
No
No
 - 07.05.2020 SB2020050712
SB2020051102
SB2020062602
and 1 more
#VU27605 - Permissions, Privileges, and Access Controls
CVE-2020-12691		 CWE-264 Medium
No
No
 - 07.05.2020 SB2020050712
SB2020051102
SB2020062602
and 1 more
#VU27604 - Permissions, Privileges, and Access Controls
CVE-2020-12690		 CWE-264 Medium
No
No
 - 07.05.2020 SB2020050712
SB2020051102
SB2020090137
#VU27603 - Permissions, Privileges, and Access Controls
CVE-2020-12689		 CWE-264 Medium
No
No
 - 07.05.2020 SB2020050712
SB2020051102
SB2020062602
and 1 more
#VU23776 - Insufficiently Protected Credentials
CVE-2019-19687		 CWE-522 High
No
No
 16.0.0-5 20.12.2019 SB2019120917
SB2019122021
SB2020020204
#VU14477 - Improper input validation
CVE-2018-14432		 CWE-20 Low
No
No
 11.0.4, 12.0.0, 13.0.0 17.08.2018 SB2018082105
SB2018082106
SB2018082210
and 2 more