Known vulnerabilities in Red Hat OpenStack - page 7

Vendor: Red Hat Inc.
Software: Red Hat OpenStack
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 406
Public exploits: 29
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack Red Hat OpenStack is affected by 406 known vulnerabilities: 1 critical, 59 high, 203 medium, 143 low Critical High Medium Low

Vulnerabilities (406)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76039 - Permissions, Privileges, and Access Controls
CVE-2023-2088		 CWE-264 Low
No
No
 - 11.05.2023 SB2023051132
SB2023051142
SB2023051143
and 7 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540		 CWE-94 Medium
No
No
 - 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU75530 - State Issues
CVE-2022-37394		 CWE-371 Low
No
No
 - 26.04.2023 SB2023042649
SB2023042650
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538		 CWE-94 High
No
No
 16.2.5 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU72339 - Resource exhaustion
CVE-2023-25577		 CWE-400 Medium
No
No
 - 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU72314 - Resource exhaustion
CVE-2022-3064		 CWE-400 Medium
No
No
 - 16.02.2023 SB2023021601
SB2023021602
SB2023022185
and 37 more
#VU71714 - External Control of File Name or Path
CVE-2022-47951		 CWE-73 Medium
No
No
 - 31.01.2023 SB2023013129
SB2023013130
SB2023013131
and 15 more
#VU71237 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-47950		 CWE-611 Medium
No
No
 - 17.01.2023 SB2023011738
SB2023012566
SB2023020941
and 5 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717		 CWE-770 Medium
Available
No
 - 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 - 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 - 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629		 CWE-330 Medium
No
No
 - 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 - 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66067 - Resource exhaustion
CVE-2022-30632		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66066 - Security Features
CVE-2022-32148		 CWE-254 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66063 - Resource exhaustion
CVE-2022-30630		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more


Showing elements 121 - 140 out of 406