Known vulnerabilities in Red Hat OpenStack for IBM Power - page 2

Vendor: Red Hat Inc.
Software: Red Hat OpenStack for IBM Power
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack_for_ibm_power:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 129
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack for IBM Power Red Hat OpenStack for IBM Power is affected by 129 known vulnerabilities: 7 high, 66 medium, 56 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68863 - Incorrect Default Permissions
CVE-2022-3146		 CWE-276 Low
No
No
 - 31.10.2022 SB2022103149
#VU68862 - Incorrect Default Permissions
CVE-2022-3101		 CWE-276 Low
No
No
 - 31.10.2022 SB2022103149
#VU68861 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-3276		 CWE-78 Medium
No
No
 - 31.10.2022 SB2022103148
SB2022103162
SB2023011810
and 1 more
#VU67757 - Improper Access Control
CVE-2022-3100		 CWE-284 Medium
No
No
 - 29.09.2022 SB2022092961
SB2022092965
SB2022100505
and 3 more
#VU66062 - Resource exhaustion
CVE-2022-30631		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more
#VU62077 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24801		 CWE-444 Medium
No
No
 - 12.04.2022 SB2022041212
SB2022050231
SB2022050232
and 21 more
#VU61611 - Origin Validation Error
CVE-2022-21712		 CWE-346 Low
No
No
 - 24.03.2022 SB2022032429
SB2022032438
SB2022032448
and 15 more
#VU61603 - Memory corruption
CVE-2021-33430		 CWE-119 Low
No
No
 - 24.03.2022 SB2021121724
SB2022032436
SB2022032439
and 11 more
#VU61601 - Memory corruption
CVE-2021-41496		 CWE-119 Low
No
No
 - 24.03.2022 SB2022032416
SB2022032436
SB2022032439
and 12 more
#VU61599 - Improper input validation
CVE-2022-21698		 CWE-20 Medium
No
No
 - 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU61488 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24761		 CWE-444 Medium
No
No
 - 21.03.2022 SB2022032107
SB2022040525
SB2022040622
and 12 more
#VU61017 - Memory corruption
CVE-2022-21716		 CWE-119 Medium
No
No
 - 04.03.2022 SB2022030407
SB2022032438
SB2022032448
and 17 more
#VU59320 - Resource exhaustion
CVE-2021-40797		 CWE-400 Medium
No
No
 - 09.01.2022 SB2021090835
SB2022010907
SB2022032433
and 3 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 - 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU56829 - Improper input validation
CVE-2021-29923		 CWE-20 Medium
No
No
 - 22.09.2021 SB2021092225
SB2021092226
SB2021100408
and 37 more
#VU56244 - Resource exhaustion
CVE-2021-21419		 CWE-400 Medium
No
No
 - 01.09.2021 SB2021090124
SB2021090126
SB2021121340
and 9 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195		 CWE-79 Medium
No
No
 - 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558		 CWE-295 Medium
Available
No
 - 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU55331 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-3654		 CWE-601 Medium
No
No
 - 27.07.2021 SB2021072712
SB2022032437
SB2022032440
and 2 more
#VU54910 - Uncontrolled Recursion
CVE-2021-31525		 CWE-674 Medium
No
No
 - 15.07.2021 SB2021071514
SB2021052725
SB2021071515
and 39 more


Showing elements 21 - 40 out of 129