Known vulnerabilities in Red Hat OpenStack for IBM Power

Vendor: Red Hat Inc.
Software: Red Hat OpenStack for IBM Power
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack_for_ibm_power:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 129
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack for IBM Power Red Hat OpenStack for IBM Power is affected by 129 known vulnerabilities: 7 high, 66 medium, 56 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82547 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46137		 CWE-444 Medium
No
No
 - 30.10.2023 SB2023103002
SB2023112046
SB2023112942
and 16 more
#VU76039 - Permissions, Privileges, and Access Controls
CVE-2023-2088		 CWE-264 Low
No
No
 - 11.05.2023 SB2023051132
SB2023051142
SB2023051143
and 7 more
#VU75664 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30861		 CWE-200 Medium
No
No
 - 02.05.2023 SB2023050221
SB2023052227
SB2023052228
and 44 more
#VU75512 - Improper Authorization
CVE-2021-28235		 CWE-285 High
No
No
 - 26.04.2023 SB2023042619
SB2023052901
SB2023052902
and 10 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 - 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72339 - Resource exhaustion
CVE-2023-25577		 CWE-400 Medium
No
No
 - 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU72314 - Resource exhaustion
CVE-2022-3064		 CWE-400 Medium
No
No
 - 16.02.2023 SB2023021601
SB2023021602
SB2023022185
and 37 more
#VU71714 - External Control of File Name or Path
CVE-2022-47951		 CWE-73 Medium
No
No
 - 31.01.2023 SB2023013129
SB2023013130
SB2023013131
and 15 more
#VU71237 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-47950		 CWE-611 Medium
No
No
 - 17.01.2023 SB2023011738
SB2023012566
SB2023020941
and 5 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717		 CWE-770 Medium
Available
No
 - 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 - 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 - 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 - 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629		 CWE-330 Medium
No
No
 - 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 - 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66067 - Resource exhaustion
CVE-2022-30632		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66066 - Security Features
CVE-2022-32148		 CWE-254 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66063 - Resource exhaustion
CVE-2022-30630		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more


Showing elements 1 - 20 out of 129