Known vulnerabilities in Red Hat OpenStack 9 - page 2

Vendor: Red Hat Inc.
Software: Red Hat OpenStack
Version: 9
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 30
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat OpenStack version 9 Red Hat OpenStack 9 is affected by 30 vulnerabilities: 3 high, 5 medium, 22 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12301 - Data Handling
CVE-2017-10664		 CWE-19 Low
No
No
 - 30.04.2018 SB2017061210
SB2017121450
SB2017121451
and 5 more
#VU8433 - Integer underflow
CVE-2017-9214		 CWE-191 Low
No
No
 10.0, 11.0 14.09.2017 SB2017091404
SB2017101111
SB2017091241
and 7 more
#VU8432 - Improper input validation
CVE-2017-9263		 CWE-20 Low
No
No
 10.0, 11.0 14.09.2017 SB2017091404
SB2017101111
SB2017081805
and 7 more
#VU8431 - Buffer over-read
CVE-2017-9265		 CWE-126 Low
No
No
 10.0, 11.0 14.09.2017 SB2017091404
SB2017081805
SB2017091241
and 6 more
#VU8113 - Improper input validation
CVE-2017-7539		 CWE-20 Low
No
No
 - 06.09.2017 SB2017060234
SB2017090604
SB2017121450
and 5 more
#VU7271 - Permissions, Privileges, and Access Controls
CVE-2017-2673		 CWE-264 Low
No
No
 - 30.06.2017 SB2017063010
SB2017101112
SB2017062821
and 2 more
#VU7105 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7233		 CWE-79 Low
No
No
 - 16.06.2017 SB2017061603
SB2017040601
SB2017040602
and 12 more
#VU6848 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7214		 CWE-200 Medium
No
No
 - 31.05.2017 SB2017053119
SB2017053120
SB2017062823
and 2 more
#VU7277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-7103		 CWE-79 Low
No
No
 - 10.12.2016 SB2016072302
SB2017011903
SB2016120801
and 19 more
#VU946 - Permissions, Privileges, and Access Controls
CVE-2016-6662		 CWE-264 High
Public exploit available
No
 - 12.10.2016 SB2016091324
SB2016091326
SB2016092708
and 12 more


Showing elements 21 - 40 out of 30