Known vulnerabilities in Red Hat OpenStack for IBM Power - page 4

Vendor: Red Hat Inc.
Software: Red Hat OpenStack for IBM Power
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack_for_ibm_power:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 129
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack for IBM Power Red Hat OpenStack for IBM Power is affected by 129 known vulnerabilities: 7 high, 66 medium, 56 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27606 - Missing Required Cryptographic Step
CVE-2020-12692		 CWE-325 Low
No
No
 - 07.05.2020 SB2020050712
SB2020051102
SB2020062602
and 1 more
#VU27605 - Permissions, Privileges, and Access Controls
CVE-2020-12691		 CWE-264 Medium
No
No
 - 07.05.2020 SB2020050712
SB2020051102
SB2020062602
and 1 more
#VU27603 - Permissions, Privileges, and Access Controls
CVE-2020-12689		 CWE-264 Medium
No
No
 - 07.05.2020 SB2020050712
SB2020051102
SB2020062602
and 1 more
#VU25510 - Heap-based Buffer Overflow
CVE-2020-1711		 CWE-122 Medium
No
No
 - 21.02.2020 SB2020022116
SB2020030419
SB2020030612
and 14 more
#VU25458 - Heap-based Buffer Overflow
CVE-2020-7039		 CWE-122 Low
No
No
 - 19.02.2020 SB2020021912
SB2020031117
SB2020031053
and 25 more
#VU25456 - Memory corruption
CVE-2020-8608		 CWE-119 Low
No
No
 - 19.02.2020 SB2020021912
SB2020033013
SB2020040146
and 24 more
#VU24219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11291		 CWE-79 Low
No
No
 - 13.01.2020 SB2019112307
SB2020021920
#VU24218 - Improper input validation
CVE-2019-11287		 CWE-20 Medium
No
No
 - 13.01.2020 SB2019112307
SB2020011311
SB2021062428
and 5 more
#VU23776 - Insufficiently Protected Credentials
CVE-2019-19687		 CWE-522 High
No
No
 - 20.12.2019 SB2019120917
SB2019122021
SB2020020204
#VU30577 - Improper input validation
CVE-2019-14856		 CWE-20 Medium
No
No
 - 26.11.2019 SB2019112625
SB2020041628
SB2020041306
and 4 more
#VU30585 - Improper input validation
CVE-2019-10206		 CWE-20 Medium
No
No
 - 22.11.2019 SB2019112223
SB2020072802
SB2020041628
and 14 more
#VU50124 - Improper input validation
CVE-2019-14818		 CWE-20 Medium
No
No
 - 14.11.2019 SB2021012837
SB20200310150
SB2020012125
and 7 more
#VU33375 - Information Exposure Through Log Files
CVE-2019-14858		 CWE-532 Low
No
No
 - 14.10.2019 SB2020041628
SB2020041306
SB2019102433
and 1 more
#VU33354 - Information Exposure Through Log Files
CVE-2019-14846		 CWE-532 Low
No
No
 - 08.10.2019 SB2020041628
SB2020041306
SB2019102430
and 3 more
#VU30730 - Improper Authentication
CVE-2019-17134		 CWE-287 High
No
No
 - 08.10.2019 SB2019100825
SB2019110680
SB2019110745
#VU19620 - Resource Management Errors
CVE-2019-14235		 CWE-399 Medium
No
No
 - 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 9 more
#VU19619 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-14234		 CWE-89 High
No
No
 - 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 9 more
#VU19618 - Resource Management Errors
CVE-2019-14233		 CWE-399 Medium
No
No
 - 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 12 more
#VU19617 - Resource Management Errors
CVE-2019-14232		 CWE-399 Medium
No
No
 - 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 14 more
#VU18967 - Cleartext Transmission of Sensitive Information
CVE-2019-12781		 CWE-319 Medium
No
No
 - 02.07.2019 SB2019070211
SB2019070601
SB2019070602
and 8 more


Showing elements 61 - 80 out of 129