Known vulnerabilities in SUSE OpenStack Cloud 8 - page 4

Vendor: SUSE
Software: SUSE OpenStack Cloud
Version: 8
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 802
Public exploits: 42
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud version 8 SUSE OpenStack Cloud 8 is affected by 802 vulnerabilities: 12 critical, 229 high, 277 medium, 284 low Critical High Medium Low

Vulnerabilities (802)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64436 - Exposure of sensitive information to an unauthorized actor
CVE-2017-13695		 CWE-200 Low
No
No
 - 16.06.2022 SB2022061630
SB2022061634
SB2022061725
and 6 more
#VU64404 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43815		 CWE-22 Low
No
No
 - 15.06.2022 SB2021121022
SB2022062026
SB2022102094
and 8 more
#VU64402 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21673		 CWE-200 Low
No
No
 - 15.06.2022 SB2022061623
SB2022062026
SB2022081215
and 12 more
#VU64399 - Cross-Site Request Forgery (CSRF)
CVE-2022-21703		 CWE-352 Medium
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21702		 CWE-79 Low
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key
CVE-2022-21713		 CWE-639 Low
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 13 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64088 - Out-of-bounds read
CVE-2022-30556		 CWE-125 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64086 - Resource exhaustion
CVE-2022-30522		 CWE-400 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061723
and 31 more
#VU64085 - Improper input validation
CVE-2022-29404		 CWE-20 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 30 more
#VU64083 - Out-of-bounds read
CVE-2022-28615		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64081 - Out-of-bounds read
CVE-2022-28614		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Public exploit available
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU63382 - Use After Free
CVE-2021-20292		 CWE-416 Low
No
No
 - 18.05.2022 SB2022061630
SB2022061634
SB2022061635
and 13 more
#VU61599 - Improper input validation
CVE-2022-21698		 CWE-20 Medium
No
No
 - 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU61017 - Memory corruption
CVE-2022-21716		 CWE-119 Medium
No
No
 - 04.03.2022 SB2022030407
SB2022032438
SB2022032448
and 17 more
#VU50427 - Out-of-bounds read
CVE-2020-10769		 CWE-125 Low
No
No
 - 26.06.2020 SB2020062625
SB2021020901
SB2022061630
and 8 more
#VU28418 - Use After Free
CVE-2019-19377		 CWE-416 Low
No
No
 - 29.11.2019 SB2019112914
SB2022061630
SB2022061631
and 14 more
#VU17858 - Resource exhaustion
CVE-2018-20784		 CWE-400 Low
No
No
 - 26.02.2019 SB2019022606
SB2022061630
SB2022061634
and 3 more
#VU10918 - Permissions, Privileges, and Access Controls
CVE-2018-7755		 CWE-264 Low
No
No
 - 12.03.2018 SB2018030603
SB2019080809
SB2019080902
and 10 more


Showing elements 61 - 80 out of 802