Known vulnerabilities in SUSE OpenStack Cloud 8 - page 25

Vendor: SUSE
Software: SUSE OpenStack Cloud
Version: 8
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 802
Public exploits: 42
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud version 8 SUSE OpenStack Cloud 8 is affected by 802 vulnerabilities: 12 critical, 229 high, 277 medium, 284 low Critical High Medium Low

Vulnerabilities (802)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63634 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-41136		 CWE-444 Medium
No
No
 - 25.05.2022 SB2022052517
SB2022052603
SB2021111919
and 4 more
#VU58114 - Missing Encryption of Sensitive Data
CVE-2021-23222		 CWE-311 Medium
No
No
 - 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 29 more
#VU58113 - Missing Encryption of Sensitive Data
CVE-2021-23214		 CWE-311 Medium
No
No
 - 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 34 more
#VU58098 - Improper Access Control
CVE-2016-2124		 CWE-284 High
No
No
 - 10.11.2021 SB2021111008
SB2021111201
SB2021112913
and 34 more
#VU58097 - Permissions, Privileges, and Access Controls
CVE-2020-25717		 CWE-264 Medium
No
No
 - 10.11.2021 SB2021111008
SB2021111201
SB2021112913
and 43 more
#VU57881 - Security Features
CVE-2021-38507		 CWE-254 Low
No
No
 - 02.11.2021 SB2021110228
SB2021110311
SB2021110501
and 25 more
#VU57880 - Insufficient UI Warning of Dangerous Operations
CVE-2021-38506		 CWE-357 Medium
No
No
 - 02.11.2021 SB2021110228
SB2021110311
SB2021110501
and 25 more
#VU57879 - Exposure of sensitive information to an unauthorized actor
CVE-2021-38505		 CWE-200 Low
No
No
 - 02.11.2021 SB2021110228
SB2021110311
SB2021111016
and 3 more
#VU57878 - Use After Free
CVE-2021-38504		 CWE-416 High
No
No
 - 02.11.2021 SB2021110228
SB2021110311
SB2021110501
and 25 more
#VU57876 - Security Features
CVE-2021-38503		 CWE-254 High
No
No
 - 02.11.2021 SB2021110228
SB2021110311
SB2021110501
and 25 more
#VU57811 - Permissions, Privileges, and Access Controls
CVE-2021-42762		 CWE-264 Low
No
No
 - 01.11.2021 SB2021110102
SB2021110112
SB2021110113
and 12 more
#VU57486 - Improper input validation
CVE-2021-35567		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 54 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550		 CWE-300 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57493 - Improper input validation
CVE-2021-35561		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 94 more
#VU57496 - Improper input validation
CVE-2021-35603		 CWE-20 Low
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more
#VU55489 - Improper Certificate Validation
CVE-2021-32066		 CWE-295 Medium
No
No
 - 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 28 more
#VU55488 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31810		 CWE-200 Medium
No
No
 - 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 27 more
#VU52842 - Unrestricted Upload of File with Dangerous Type
CVE-2021-31542		 CWE-434 High
No
No
 - 04.05.2021 SB2021050411
SB2021111919
SB2021050433
and 7 more
#VU52796 - Command injection
CVE-2021-31799		 CWE-77 High
No
No
 - 03.05.2021 SB2021050306
SB2021052413
SB2021052414
and 27 more
#VU49588 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26298		 CWE-79 Medium
No
No
 - 11.01.2021 SB2021011823
SB2021011824
SB2021111919
and 4 more


Showing elements 481 - 500 out of 802