Known vulnerabilities in Red Hat OpenStack - page 10

Vendor: Red Hat Inc.
Software: Red Hat OpenStack
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 406
Public exploits: 29
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack Red Hat OpenStack is affected by 406 known vulnerabilities: 1 critical, 59 high, 203 medium, 143 low Critical High Medium Low

Vulnerabilities (406)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64805 - Improper input validation
CVE-2021-43565		 CWE-20 Medium
No
No
 16.2.z 29.06.2022 SB2021120347
SB2022062928
SB2022072127
and 39 more
#VU63815 - Improper input validation
CVE-2022-30323		 CWE-20 Medium
No
No
 16.2.z 30.05.2022 SB2022053009
SB2022072127
SB2022083038
and 14 more
#VU63814 - Improper input validation
CVE-2022-30322		 CWE-20 Medium
No
No
 16.2.z 30.05.2022 SB2022053009
SB2022072127
SB2022083038
and 14 more
#VU63811 - Improper input validation
CVE-2022-30321		 CWE-20 Medium
No
No
 16.2.z 30.05.2022 SB2022053009
SB2022072127
SB2022083038
and 14 more
#VU63810 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-26945		 CWE-78 High
No
No
 16.2.z 30.05.2022 SB2022053009
SB2022072127
SB2022083038
and 14 more
#VU63490 - Out-of-bounds read
CVE-2022-1629		 CWE-125 High
No
No
 16.2.z 20.05.2022 SB2022052017
SB2022063027
SB2022070109
and 27 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782		 CWE-303 Medium
No
No
 16.2.z 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776		 CWE-200 Low
No
No
 16.2.z 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU62641 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27774		 CWE-200 Medium
No
No
 16.2.z 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 57 more
#VU62640 - Improper Authentication
CVE-2022-22576		 CWE-287 Medium
No
No
 16.2.z 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 60 more
#VU62050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28346		 CWE-89 High
Available
No
 16.1.9, 16.2.3 11.04.2022 SB2022041110
SB2022041125
SB2022041126
and 14 more
#VU62002 - Improper input validation
CVE-2022-1271		 CWE-20 High
No
No
 16.2, 16.2.z 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more
#VU61681 - Server-Side Request Forgery (SSRF)
CVE-2021-4189		 CWE-918 Medium
No
No
 16.2.z 29.03.2022 SB2022032904
SB2022032905
SB2022032907
and 42 more
#VU60738 - Integer overflow
CVE-2022-25314		 CWE-190 Medium
No
No
 16.2.z 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU60737 - Stack-based buffer overflow
CVE-2022-25313		 CWE-121 High
No
No
 16.2.z 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 64 more
#VU59089 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3737		 CWE-835 Low
No
No
 16.2.z 22.12.2021 SB2021122214
SB2022050235
SB2022051138
and 58 more
#VU56685 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-40528		 CWE-327 Medium
No
No
 16.2.z 17.09.2021 SB2021091710
SB2021091711
SB2021091629
and 44 more
#VU56217 - Memory corruption
CVE-2021-3634		 CWE-119 High
No
No
 16.2.z 31.08.2021 SB2021083135
SB2021083136
SB2022011903
and 46 more
#VU54999 - Permissions, Privileges, and Access Controls
CVE-2021-32760		 CWE-264 Medium
No
No
 16.2 20.07.2021 SB2021072005
SB2021072227
SB2021072708
and 17 more
#VU22824 - Resource exhaustion
CVE-2019-11253		 CWE-400 Medium
No
No
 16.2 18.11.2019 SB2019101712
SB2019111815
SB2020020731
and 12 more


Showing elements 181 - 200 out of 406