Product by OpenStack
OpenStack Keystone
55 known vulnerabilities in OpenStack Keystone (OpenStack), 0 of them actively exploited (CISA KEV).
Key figures
55
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2020-12691 | OpenStack Keystone: security vulnerability | 8.8 | |
| High | CVE-2020-12690 | OpenStack Keystone: security vulnerability | 8.8 | |
| High | CVE-2021-38155 | OpenStack Keystone: Information Disclosure | 7.5 | |
| Medium | CVE-2013-0270 | Keystone: openstack keystone: denial of service via large http request with long tenant name | 6.5 | |
| High | CVE-2019-19687 | OpenStack Keystone: security vulnerability | 8.8 | |
| High | CVE-2015-7546 | OpenStack Keystone: security vulnerability | 7.5 | |
| High | CVE-2020-12689 | OpenStack Keystone: security vulnerability | 8.8 | |
| High | CVE-2021-3563 | Keystone: Incorrect Authorization | 7.4 | |
| High | CVE-2026-90460 | OpenStack Keystone: Incorrect Authorization | — | |
| High | CVE-2026-80184 | OpenStack Keystone: Incorrect Authorization | — | |
| High | CVE-2026-80182 | OpenStack Keystone: Incorrect Authorization | — | |
| Medium | CVE-2012-5571 | Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling | 5.4 | |
| High | CVE-2012-1572 | Keystone: security vulnerability | 7.5 | |
| Medium | CVE-2018-14432 | OpenStack Keystone: security vulnerability | 5.3 | |
| High | CVE-2026-43001 | OpenStack Keystone: Improper Validation of Consistency within Input | 8.0 | |
| High | CVE-2026-80183 | OpenStack Keystone: Type Confusion | — | |
| High | CVE-2026-42999 | OpenStack Keystone: Authorization Bypass Through User-Controlled Key | 8.8 | |
| High | CVE-2026-43000 | OpenStack Keystone: Incorrect Privilege Assignment | 8.8 | |
| High | CVE-2026-42998 | OpenStack Keystone: Incorrect Authorization | 8.8 | |
| Not rated | CVE-2012-4456 | OpenStack Keystone: security vulnerability | — | |
| High | CVE-2026-40683 | OpenStack Keystone: Type Confusion | 7.7 | |
| Not rated | CVE-2013-2014 | OpenStack Keystone: Denial of Service | — | |
| Not rated | CVE-2013-0247 | OpenStack Keystone: Denial of Service | — | |
| Not rated | CVE-2014-2828 | OpenStack Keystone: Denial of Service | — | |
| Not rated | CVE-2013-2157 | OpenStack Keystone: Authentication Bypass | — |