Read the docs

OpenStack

Records333All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical23CVSS 9.0–10.0
CVSS high77CVSS 7.0–8.9

Exploited now

OpenStack records in CISA KEV

No OpenStack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Keystone 44 records MEDIUM Nova 39 records HIGH Folsom 25 records LOW Neutron 25 records MEDIUM Horizon 24 records MEDIUM Essex 15 records LOW Image Registry And Delivery Service (glance) 15 records LOW Swift 15 records MEDIUM

Records

15 records in Essex · all components

TI-2013-00265 CVE-2013-0335 · GHSA-qfp8-hfqx-c79c

Openstack nova: vnc proxy can connect to the wrong vm

Priority LOW 37

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.0214 Published 2013-03-22 Fixed in 2012.2.3-7.el6ost, 12.0.0a0 CWE-613
TI-2012-03913 CVE-2012-4573 · GHSA-6rrm-xxvh-7r87

The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote…

Priority LOW 31

The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-201…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.0341 Published 2012-11-11 Fixed in 11.0.0a0 CWE-264
TI-2012-02891 CVE-2012-3360 · GHSA-m454-cm7h-rqhh

Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom…

Priority LOW 30

Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files t…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.03081 Published 2012-07-22 Fixed in 12.0.0a0 CWE-22
TI-2012-02955 CVE-2012-3426 · GHSA-xp97-6w7r-4cjc

OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and…

Priority LOW 27

OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization…

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.02296 Published 2012-07-31 Fixed in 8.0.0a0 CWE-264
TI-2012-03068 CVE-2012-3542 · GHSA-gf2q-j2qq-pjf2

OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex…

Priority LOW 25

OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02491 Published 2012-09-05 Fixed in 2012.1 CWE-264
TI-2012-02292 CVE-2012-2654 · GHSA-46r8-9cj7-pw6g

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1)…

Priority LOW 25

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified e…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02596 Published 2012-06-21 Fixed in 12.0.0a0 CWE-20
TI-2013-01621 CVE-2013-1838 · GHSA-63fq-8fp9-vhwq

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly…

Priority LOW 24

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failu…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02742 Published 2013-03-22 Fixed in 12.0.0a0 CWE-399
TI-2012-02902 CVE-2012-3371 · GHSA-xxgm-qpj5-4886

The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when…

Priority LOW 21

The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01855 Published 2012-07-17 Fixed in 12.0.0a0 CWE-20
Open these records in search →