Known vulnerabilities in SUSE OpenStack Cloud - page 60

Vendor: SUSE
Software: SUSE OpenStack Cloud
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1686
Public exploits: 73
Known exploited (KEV): 30
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud SUSE OpenStack Cloud is affected by 1686 known vulnerabilities: 20 critical, 424 high, 541 medium, 701 low Critical High Medium Low

Vulnerabilities (1686)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66467 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-42771		 CWE-22 Medium
No
No
 - 12.08.2022 SB20211214110
SB2022081226
SB2022083038
and 18 more
#VU63043 - Out-of-bounds read
CVE-2021-4156		 CWE-125 Medium
No
No
 - 11.05.2022 SB2022032803
SB2022051131
SB2022051158
and 11 more
#VU62737 - Improper Locking
CVE-2021-4147		 CWE-667 Low
No
No
 - 03.05.2022 SB2022050308
SB2022010425
SB2022010528
and 6 more
#VU59382 - Memory corruption
CVE-2022-22751		 CWE-119 High
No
No
 - 11.01.2022 SB2022011114
SB2022011115
SB2022011726
and 27 more
#VU59376 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-22748		 CWE-451 Medium
No
No
 - 11.01.2022 SB2022011114
SB2022011115
SB2022011726
and 26 more
#VU59181 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-45452		 CWE-22 Low
No
No
 - 04.01.2022 SB2022010412
SB2022031201
SB2022011843
and 7 more
#VU59180 -
CVE-2021-45116		 Low
No
No
 - 04.01.2022 SB2022010412
SB2022031201
SB2022011843
and 6 more
#VU59179 - Resource Management Errors
CVE-2021-45115		 CWE-399 Medium
No
No
 - 04.01.2022 SB2022010412
SB2022031201
SB2022011843
and 6 more
#VU59057 - Server-Side Request Forgery (SSRF)
CVE-2021-44224		 CWE-918 Medium
No
No
 - 20.12.2021 SB2021122005
SB2021122021
SB2021122709
and 33 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Available
No
 - 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU59048 - Out-of-bounds write
CVE-2021-4011		 CWE-787 Low
No
No
 - 17.12.2021 SB2021121702
SB2021121703
SB2021122215
and 22 more
#VU59046 - Out-of-bounds write
CVE-2021-4009		 CWE-787 Low
No
No
 - 17.12.2021 SB2021121702
SB2021121703
SB2021122215
and 21 more
#VU58358 - Use After Free
CVE-2021-3975		 CWE-416 Low
No
No
 - 24.11.2021 SB2021112416
SB2021112418
SB2022050308
and 8 more
#VU57511 - Improper input validation
CVE-2021-35604		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101944
SB2022032018
SB2022060129
and 32 more
#VU57485 - Improper input validation
CVE-2021-35560		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101940
SB2022020177
SB2022021424
and 28 more
#VU57495 - Improper input validation
CVE-2021-35578		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 95 more
#VU57422 - Information Exposure Through an Error Message
CVE-2021-3620		 CWE-209 Low
No
No
 - 19.10.2021 SB2021101903
SB2021101904
SB2021101905
and 10 more
#VU54626 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3583		 CWE-94 High
No
No
 - 08.07.2021 SB2021070822
SB2021070823
SB2021071517
and 12 more
#VU46134 - Improper Link Resolution Before File Access ('Link Following')
CVE-2020-14367		 CWE-59 Medium
No
No
 - 31.08.2020 SB2020083109
SB2020083110
SB2020082303
and 6 more
#VU45745 - Incorrect Permission Assignment for Critical Resource
CVE-2020-15862		 CWE-732 Medium
No
No
 - 17.08.2020 SB2020081707
SB2020082704
SB2020111826
and 22 more


Showing elements 1181 - 1200 out of 1686