Known vulnerabilities in Red Hat OpenStack - page 11

Vendor: Red Hat Inc.
Software: Red Hat OpenStack
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 406
Public exploits: 29
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack Red Hat OpenStack is affected by 406 known vulnerabilities: 1 critical, 59 high, 203 medium, 143 low Critical High Medium Low

Vulnerabilities (406)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93491 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2019-19794		 CWE-338 Medium
No
No
 16.2 28.06.2024 SB2019121320
SB2020011901
SB20220511102
#VU87849 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-29482		 CWE-835 Medium
No
No
 16.2 27.03.2024 SB2024032727
SB2021072832
SB2022030135
and 1 more
#VU73891 - Insufficiently Protected Credentials
CVE-2022-0718		 CWE-522 Low
No
No
 16.1.9, 16.2 21.03.2023 SB2023032143
SB2023011810
SB2022032455
and 2 more
#VU62077 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24801		 CWE-444 Medium
No
No
 - 12.04.2022 SB2022041212
SB2022050231
SB2022050232
and 21 more
#VU61763 - Use After Free
CVE-2022-1154		 CWE-416 High
No
No
 16.2 31.03.2022 SB2022033113
SB2022033115
SB2022041528
and 33 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 16.2 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU61611 - Origin Validation Error
CVE-2022-21712		 CWE-346 Low
No
No
 - 24.03.2022 SB2022032429
SB2022032438
SB2022032448
and 15 more
#VU61603 - Memory corruption
CVE-2021-33430		 CWE-119 Low
No
No
 - 24.03.2022 SB2021121724
SB2022032436
SB2022032439
and 11 more
#VU61601 - Memory corruption
CVE-2021-41496		 CWE-119 Low
No
No
 - 24.03.2022 SB2022032416
SB2022032436
SB2022032439
and 12 more
#VU61488 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24761		 CWE-444 Medium
No
No
 - 21.03.2022 SB2022032107
SB2022040525
SB2022040622
and 12 more
#VU61017 - Memory corruption
CVE-2022-21716		 CWE-119 Medium
No
No
 - 04.03.2022 SB2022030407
SB2022032438
SB2022032448
and 17 more
#VU59320 - Resource exhaustion
CVE-2021-40797		 CWE-400 Medium
No
No
 - 09.01.2022 SB2021090835
SB2022010907
SB2022032433
and 3 more
#VU56829 - Improper input validation
CVE-2021-29923		 CWE-20 Medium
No
No
 16.2 22.09.2021 SB2021092225
SB2021092226
SB2021100408
and 37 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558		 CWE-295 Medium
Available
No
 16.2 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU55331 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-3654		 CWE-601 Medium
No
No
 - 27.07.2021 SB2021072712
SB2022032437
SB2022032440
and 2 more
#VU48795 - Improper Access Control
CVE-2020-15257		 CWE-284 Medium
Available
No
 16.2 01.12.2020 SB2020120606
SB2020120609
SB2020120715
and 10 more
#VU66458 - Improper input validation
CVE-2019-13750		 CWE-20 Medium
No
No
 16.2 10.12.2019 SB2019121097
SB2022081226
SB2022083038
and 16 more
#VU66459 - Use of Uninitialized Resource
CVE-2019-13751		 CWE-908 Medium
No
No
 16.2 10.12.2019 SB2019121097
SB2022081226
SB2022083038
and 16 more
#VU23191 - Integer overflow
CVE-2019-5827		 CWE-190 High
No
No
 16.2 02.12.2019 SB2019120212
SB2020031502
SB2022081226
and 12 more
#VU21792 - Heap-based Buffer Overflow
CVE-2019-17594		 CWE-122 High
No
No
 16.2 15.10.2019 SB2019101515
SB2019112401
SB2019112402
and 23 more


Showing elements 201 - 220 out of 406