Known vulnerabilities in SUSE OpenStack Cloud 7 - page 4

Vendor: SUSE
Version: 7
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud:*:*:*:*:*:*:*:*
Total vulnerabilities: 71
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud version 7 SUSE OpenStack Cloud 7 is affected by 71 vulnerabilities: 11 high, 33 medium, 27 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51194 - Improper Authorization
CVE-2020-27779
CWE-285 Low
No
No
- 03.03.2021 SB2021030311
SB2021030401
SB2021030402
and 37 more
#VU50990 - Integer overflow
CVE-2020-36242
CWE-190 High
No
No
- 28.02.2021 SB2021022812
SB2021022813
SB2021052024
and 27 more
#VU50889 - Memory corruption
CVE-2021-23978
CWE-119 High
No
No
- 23.02.2021 SB2021022318
SB2021022319
SB2021022503
and 22 more
#VU50888 - Exposure of sensitive information to an unauthorized actor
CVE-2021-23973
CWE-200 Low
No
No
- 23.02.2021 SB2021022318
SB2021022319
SB2021022503
and 21 more
#VU50881 - Improperly Implemented Security Check for Standard
CVE-2021-23968
CWE-358 Medium
No
No
- 23.02.2021 SB2021022318
SB2021022319
SB2021022503
and 21 more
#VU50879 - Improperly Implemented Security Check for Standard
CVE-2021-23969
CWE-358 Medium
No
No
- 23.02.2021 SB2021022318
SB2021022319
SB2021022503
and 21 more
#VU49916 - Stack-based buffer overflow
CVE-2020-27221
CWE-121 High
No
No
- 21.01.2021 SB2021012130
SB2021030504
SB2021030505
and 16 more
#VU47775 - Improper input validation
CVE-2020-14803
CWE-20 Medium
No
No
- 21.10.2020 SB2020102110
SB2020102801
SB2020102802
and 50 more
#VU7887 - Exposure of sensitive information to an unauthorized actor
CVE-2017-9799
CWE-200 Low
No
No
- 15.08.2017 SB2017080901
SB2017111302
SB2017111303
#VU6848 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7214
CWE-200 Medium
No
No
- 31.05.2017 SB2017053119
SB2017053120
SB2017062823
and 2 more
#VU6849 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7400
CWE-79 Low
No
No
- 31.05.2017 SB2017053119
SB2017053120
SB2017062820
and 1 more


Showing elements 61 - 80 out of 71