Known vulnerabilities in Red Hat OpenStack for IBM Power - page 3

Vendor: Red Hat Inc.
Software: Red Hat OpenStack for IBM Power
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack_for_ibm_power:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 129
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack for IBM Power Red Hat OpenStack for IBM Power is affected by 129 known vulnerabilities: 7 high, 66 medium, 56 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56024 - Resource Management Errors
CVE-2021-33198		 CWE-399 Medium
No
No
 - 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 46 more
#VU56023 - Missing Authorization
CVE-2021-33197		 CWE-862 Medium
No
No
 - 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 41 more
#VU49154 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-29565		 CWE-601 Low
No
No
 - 04.12.2020 SB2020122806
SB2020122811
SB2021010518
and 1 more
#VU45985 - Out-of-bounds write
CVE-2020-14364		 CWE-787 Medium
Available
No
 - 24.08.2020 SB2020082410
SB2020090715
SB2020091121
and 35 more
#VU44163 - Reachable Assertion
CVE-2020-16092		 CWE-617 Medium
No
No
 - 11.08.2020 SB2020081102
SB2020090715
SB2020101311
and 9 more
#VU42731 - Improper Authentication
CVE-2020-15136		 CWE-287 Medium
No
No
 - 11.08.2020 SB2020081020
SB2021031825
SB2020122606
#VU41650 - Resource Management Errors
CVE-2020-15106		 CWE-399 Medium
No
No
 - 10.08.2020 SB2020081020
SB2021050608
SB2022092231
and 5 more
#VU41647 - Improper preservation of permissions
CVE-2020-15113		 CWE-281 Low
No
No
 - 10.08.2020 SB2020081020
SB2022092231
SB2022112104
and 5 more
#VU41624 - Resource Management Errors
CVE-2020-15112		 CWE-399 Medium
No
No
 - 10.08.2020 SB2020081020
SB2021050608
SB2022092231
and 5 more
#VU41617 - Weak Password Requirements
CVE-2020-15115		 CWE-521 Medium
No
No
 - 10.08.2020 SB2020081020
SB2021031825
SB2025020526
and 2 more
#VU41615 - Resource exhaustion
CVE-2020-15114		 CWE-400 Medium
No
No
 - 10.08.2020 SB2020081020
SB2022092231
SB2021031825
and 1 more
#VU27389 - Use After Free
CVE-2020-1983		 CWE-416 Medium
Available
No
 - 28.04.2020 SB2020042818
SB2020043016
SB2020050725
and 16 more
#VU27388 - Missing release of memory after effective lifetime
CVE-2019-20382		 CWE-401 Medium
No
No
 - 28.04.2020 SB2019090618
SB2020040749
SB2020043016
and 8 more
#VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10735		 CWE-79 Low
No
No
 - 10.10.2019 SB2019010911
SB2019101009
SB2020093090
and 21 more
#VU18374 - NULL Pointer Dereference
CVE-2019-11596		 CWE-476 Medium
No
No
 - 29.04.2019 SB2019042906
SB2019050201
SB2020042860
and 4 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 - 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331		 CWE-79 Low
No
No
 - 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more
#VU16956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20676		 CWE-79 Low
No
No
 - 13.01.2019 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU16542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20677		 CWE-79 Low
No
No
 - 14.12.2018 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042		 CWE-79 Low
No
No
 - 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more


Showing elements 41 - 60 out of 129