Known vulnerabilities in HPE Helion Openstack - page 25

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:hpe_helion_openstack:*:*:*:*:*:*:*:*
Total vulnerabilities: 787
Public exploits: 43
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HPE Helion Openstack HPE Helion Openstack is affected by 787 known vulnerabilities: 11 critical, 221 high, 273 medium, 282 low Critical High Medium Low

Vulnerabilities (787)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63669 - Out-of-bounds write
CVE-2021-42008
CWE-787 Low
Available
No
- 25.05.2022 SB2021100520
SB2022022237
SB2021101518
and 16 more
#VU63667 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-40490
CWE-362 Low
No
No
- 25.05.2022 SB2022010536
SB2023080805
SB2021093033
and 22 more
#VU63385 - Improper Validation of Array Index
CVE-2021-43389
CWE-129 Low
No
No
- 18.05.2022 SB2022061635
SB2022061725
SB2022061728
and 37 more
#VU59474 - Memory corruption
CVE-2021-42739
CWE-119 Low
No
No
- 11.01.2022 SB2022011149
SB2022011150
SB2022011735
and 59 more
#VU58352 - Improper input validation
CVE-2021-28709
CWE-20 Medium
No
No
- 24.11.2021 SB2021112410
SB2021120620
SB2022011910
and 8 more
#VU58351 - Improper input validation
CVE-2021-28705
CWE-20 Medium
No
No
- 24.11.2021 SB2021112410
SB2021120620
SB2022011910
and 8 more
#VU58346 - Improper input validation
CVE-2021-28708
CWE-20 Medium
No
No
- 24.11.2021 SB2021112409
SB2021120620
SB2021112921
and 7 more
#VU58345 - Improper input validation
CVE-2021-28707
CWE-20 Medium
No
No
- 24.11.2021 SB2021112409
SB2021120620
SB2021112921
and 7 more
#VU58344 - Improper input validation
CVE-2021-28704
CWE-20 Medium
No
No
- 24.11.2021 SB2021112409
SB2021120620
SB2021112921
and 7 more
#VU58342 - Memory corruption
CVE-2021-28706
CWE-119 Medium
No
No
- 24.11.2021 SB2021112407
SB2021120620
SB2022011910
and 8 more
#VU57811 - Permissions, Privileges, and Access Controls
CVE-2021-42762
CWE-264 Low
No
No
- 01.11.2021 SB2021110102
SB2021110112
SB2021110113
and 12 more
#VU57486 - Improper input validation
CVE-2021-35567
CWE-20 Medium
No
No
- 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 54 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550
CWE-300 Medium
No
No
- 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57493 - Improper input validation
CVE-2021-35561
CWE-20 Medium
No
No
- 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 94 more
#VU57496 - Improper input validation
CVE-2021-35603
CWE-20 Low
No
No
- 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more
#VU55489 - Improper Certificate Validation
CVE-2021-32066
CWE-295 Medium
No
No
- 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 28 more
#VU55488 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31810
CWE-200 Medium
No
No
- 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 27 more
#VU52796 - Command injection
CVE-2021-31799
CWE-77 High
No
No
- 03.05.2021 SB2021050306
SB2021052413
SB2021052414
and 27 more
#VU47333 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-25613
CWE-444 Medium
Available
No
- 05.10.2020 SB2020100509
SB2020100703
SB2020111806
and 21 more
#VU14162 - Stack-based buffer overflow
CVE-2018-14679
CWE-121 Low
No
No
- 01.08.2018 SB2018080114
SB2018080302
SB2018080606
and 21 more


Showing elements 481 - 500 out of 787