Known vulnerabilities in Red Hat OpenStack - page 2

Vendor: Red Hat Inc.
Software: Red Hat OpenStack
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 406
Public exploits: 29
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack Red Hat OpenStack is affected by 406 known vulnerabilities: 1 critical, 59 high, 203 medium, 143 low Critical High Medium Low

Vulnerabilities (406)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-57833		 CWE-89 High
Available
No
 16.2, 17.1 03.09.2025 SB2025090342
SB2025090433
SB2025090469
and 19 more
#VU108124 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-43859		 CWE-444 Medium
No
No
 17.1, 18.0 02.05.2025 SB2025050214
SB2025050215
SB2025050216
and 24 more
#VU105387 - Improper input validation
CVE-2025-27516		 CWE-20 Low
No
No
 17.1 06.03.2025 SB2025030628
SB2025031001
SB2025031002
and 83 more
#VU100769 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-8007		 CWE-300 Medium
No
No
 17.1.4 21.11.2024 SB2024112158
SB2024112164
#VU99623 - Resource exhaustion
CVE-2024-49769		 CWE-400 Medium
No
No
 16.2, 17.1 01.11.2024 SB2024110154
SB20241101104
SB2024110713
and 24 more
#VU99613 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-49768		 CWE-444 Medium
No
No
 16.2, 17.1 01.11.2024 SB2024110154
SB2024110156
SB2024110157
and 23 more
#VU98123 - Improper Validation of Integrity Check Value
CVE-2024-47211		 CWE-354 Medium
No
No
 17.1, 18.0.4 08.10.2024 SB2024100260
SB2024102305
SB2024103012
and 2 more
#VU97965 - Improper Access Control
CVE-2024-44082		 CWE-284 Low
No
No
 16.2, 17.1.4 02.10.2024 SB2024100260
SB2024100261
SB2024100262
and 10 more
#VU97216 - Resource exhaustion
CVE-2024-34156		 CWE-400 Medium
No
No
 16.2, 17.1 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 16.2 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-5569		 CWE-835 Medium
No
No
 17.1.4 26.07.2024 SB2024072688
SB2024072690
SB2024072692
and 59 more
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596		 CWE-327 Medium
Available
No
 16.2 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 16.2 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 17.1.4 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 16.2 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 16.2 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87033 - Inefficient Regular Expression Complexity
CVE-2024-27351		 CWE-1333 Medium
No
No
 17.1 04.03.2024 SB2024030431
SB2024030441
SB2024030442
and 21 more
#VU79296 - Insufficient Verification of Data Authenticity
CVE-2023-37920		 CWE-345 Medium
No
No
 16.2 09.08.2023 SB2023080939
SB20230821166
SB2023090820
and 89 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 16.2 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU19178 - Out-of-bounds write
CVE-2019-12900		 CWE-787 High
No
No
 16.2 15.07.2019 SB2019071503
SB2019072101
SB2019080907
and 85 more


Showing elements 21 - 40 out of 406