Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: OpenStack Component: Glance Clear all filters
TI-2026-27114 CVE-2026-34881 · GHSA-mc26-q38v-83gv

Server-side request forgery in OpenStack Glance

Priority MEDIUM 56

OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF).

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00276 Published 2026-03-31 Partial fix · 29.1.1, 30.1.1 +3 CWE-918
TI-2022-03780 CVE-2022-4134 · GHSA-5gp5-vxj6-4257

A flaw was found in openstack-glance.

Priority LOW 14

A flaw was found in openstack-glance.

CVSS 3.1LOW 2.8 Local Low privileges User interaction EPSS 0.00326 Published 2023-03-06 Fix deferred CWE-829
TI-2022-23762 CVE-2022-47951 · GHSA-7h75-hwxx-qpgc

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and…

Priority MEDIUM 59

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01063 Published 2023-01-26 Fixed in 19.1.2, 20.0.2 +4 CWE-22
TI-2015-04330 CVE-2015-5162 · GHSA-g2j5-7vgx-6xrx

The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1…

Priority LOW 38

The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, which might allow attackers to cause a denial…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03088 Published 2016-10-07 Partial fix · 7.0.2, 9.0.0 +2 CWE-399
TI-2015-04331 CVE-2015-5163 · GHSA-q73f-vjc2-3gqf

The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2…

Priority LOW 20

The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01499 Published 2015-08-19 Fixed in 2015.1.2 CWE-200
TI-2013-03881 CVE-2013-4428 · GHSA-hv7x-f537-wh3x

OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4…

Priority LOW 22

OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which al…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.03082 Published 2013-10-27 Partial fix CWE-264