Product by OpenStack

OpenStack Nova

60 known vulnerabilities in OpenStack Nova (OpenStack), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in OpenStack Nova (OpenStack)

Medium	CVE-2021-3654	Openstack-nova: Open Redirect also in 1 other product	6.1	02.03.2022
Critical	CVE-2017-7214	OpenStack Nova: security vulnerability	9.8	21.03.2017
High	CVE-2017-18191	Red Hat OpenStack: Denial of Service also in 1 other product	7.5	19.02.2018
High	CVE-2015-5162	OpenStack Cinder: Denial of Service also in 2 other products	7.5	07.10.2016
High	CVE-2017-17051	OpenStack Nova: Denial of Service	8.6	05.12.2017
High	CVE-2013-0335	Openstack nova: vnc proxy can connect to the wrong vm also in 9 other products	7.6	22.03.2013
High	CVE-2020-17376	OpenStack Nova: security vulnerability	8.3	26.08.2020
Medium	CVE-2012-5625	Openstack nova: information leak in libvirt lvm-backed instances also in 6 other products	6.5	26.12.2012
Medium	CVE-2015-8749	OpenStack Nova: security vulnerability	5.9	15.01.2016
Medium	CVE-2019-14433	OpenStack Nova: security vulnerability also in 3 other products	6.5	09.08.2019
Medium	CVE-2016-2140	OpenStack Nova: security vulnerability	5.3	12.04.2016
High	CVE-2026-24708	OpenStack Nova: Incorrect Resource Transfer Between Spheres also in 2 other products	8.2	18.02.2026
Medium	CVE-2017-16239	OpenStack Nova: security vulnerability	6.5	14.11.2017
Medium	CVE-2011-4076	Nova: security vulnerability	5.9	26.11.2019
Medium	CVE-2024-40767	OpenStack Nova: security vulnerability	6.5	24.07.2024
Low	CVE-2015-7548	OpenStack Nova: security vulnerability	3.5	12.01.2016
Medium	CVE-2024-32498	OpenStack Cinder: security vulnerability also in 4 other products	6.5	05.07.2024
High	CVE-2026-46448	OpenStack Nova: Incorrect Resource Transfer Between Spheres	8.5	16.06.2026
Not rated	CVE-2015-7713	OpenStack Nova: security vulnerability	—	29.10.2015
Not rated	CVE-2015-3241	OpenStack Nova: Denial of Service	—	08.09.2015
Medium	CVE-2022-47951	OpenStack Cinder: security vulnerability also in 5 other products	5.7	26.01.2023
Not rated	CVE-2015-3280	OpenStack Nova: Denial of Service	—	26.10.2015
Not rated	CVE-2012-3360	OpenStack Compute (Essex): Path Traversal also in 2 other products	—	22.07.2012
Not rated	CVE-2014-3708	OpenStack Nova: Denial of Service also in 1 other product	—	31.10.2014
Not rated	CVE-2013-1838	OpenStack Compute (Essex): Denial of Service also in 4 other products	—	22.03.2013

All vulnerabilities in search

All products by OpenStack

Key figures

Vulnerabilities