Known vulnerabilities in Red Hat OpenStack - page 14

Vendor: Red Hat Inc.
Software: Red Hat OpenStack
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 406
Public exploits: 29
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack Red Hat OpenStack is affected by 406 known vulnerabilities: 1 critical, 59 high, 203 medium, 143 low Critical High Medium Low

Vulnerabilities (406)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57242 - Improper Access Control
CVE-2021-40085		 CWE-284 Low
No
No
 10.0, 13.0, 16.1, 16.2 12.10.2021 SB2021101209
SB2022053134
SB2023051224
and 5 more
#VU57036 - Heap-based Buffer Overflow
CVE-2021-32626		 CWE-122 Medium
No
No
 10.0, 13.0 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 24 more
#VU57034 - Improper input validation
CVE-2021-32675		 CWE-20 Medium
No
No
 10.0, 13.0 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 24 more
#VU57029 - Integer overflow
CVE-2021-41099		 CWE-190 High
No
No
 10.0, 13.0 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 22 more
#VU57031 - Integer overflow
CVE-2021-32687		 CWE-190 Medium
No
No
 10.0, 13.0 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 22 more
#VU57032 - Integer overflow
CVE-2021-32628		 CWE-190 High
No
No
 10.0, 13.0 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 22 more
#VU57033 - Integer overflow
CVE-2021-32627		 CWE-190 High
No
No
 10.0, 13.0 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 22 more
#VU56244 - Resource exhaustion
CVE-2021-21419		 CWE-400 Medium
No
No
 - 01.09.2021 SB2021090124
SB2021090126
SB2021121340
and 9 more
#VU56024 - Resource Management Errors
CVE-2021-33198		 CWE-399 Medium
No
No
 - 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 46 more
#VU56023 - Missing Authorization
CVE-2021-33197		 CWE-862 Medium
No
No
 - 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 41 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195		 CWE-79 Medium
No
No
 - 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU54910 - Uncontrolled Recursion
CVE-2021-31525		 CWE-674 Medium
No
No
 - 15.07.2021 SB2021071514
SB2021052725
SB2021071515
and 39 more
#VU53742 - Server-Side Request Forgery (SSRF)
CVE-2021-33571		 CWE-918 Medium
No
No
 16.1, 16.2 02.06.2021 SB2021060208
SB2021061516
SB2021060234
and 5 more
#VU53741 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-33203		 CWE-22 Medium
No
No
 16.1, 16.2 02.06.2021 SB2021060208
SB2021061516
SB2021060234
and 6 more
#VU52842 - Unrestricted Upload of File with Dangerous Type
CVE-2021-31542		 CWE-434 High
No
No
 16.1 04.05.2021 SB2021050411
SB2021111919
SB2021050433
and 7 more
#VU51936 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-28658		 CWE-22 Medium
No
No
 16.1 06.04.2021 SB2021040605
SB2021040630
SB2021121031
and 3 more
#VU50989 - Resource exhaustion
CVE-2021-21240		 CWE-400 Medium
No
No
 16.1.6 28.02.2021 SB2021022811
SB2021022814
SB2021051932
and 6 more
#VU50172 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-3281		 CWE-22 High
Available
No
 16.1, 16.2 01.02.2021 SB2021020117
SB2021020612
SB2021080213
and 7 more
#VU28245 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-11078		 CWE-93 Low
No
No
 16.1.6 26.05.2020 SB2020052606
SB2020090111
SB2020110521
and 15 more
#VU48780 - Memory corruption
CVE-2015-8011		 CWE-119 High
No
No
 - 28.01.2020 SB2020012836
SB2020120408
SB2020120409
and 17 more


Showing elements 261 - 280 out of 406