Product by Red Hat
Openstack
28 known vulnerabilities in Openstack (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
28
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-36053 | Django: Denial of Service | 7.5 | |
| High | CVE-2020-1711 | Red Hat QEMU: Heap-based Buffer Overflow | 7.7 | |
| Medium | CVE-2024-27351 | Django: Denial of Service | 5.3 | |
| High | CVE-2026-23490 | pyasn1 has a DoS vulnerability in decoder | 7.5 | |
| Medium | CVE-2020-10711 | Red Hat Kernel: NULL Pointer Dereference | 5.9 | |
| Medium | CVE-2023-46118 | Denial of Service by publishing large messages over the HTTP API | 4.9 | |
| Critical | CVE-2019-14859 | Red Hat Python-ecdsa: Improper Verification of Cryptographic Signature | 7.4 | |
| Medium | CVE-2017-7543 | Red Hat Openstack-neutron: Race Condition | 5.3 | |
| Medium | CVE-2024-42353 | WebOb's location header normalization during redirect leads to open redirect | 6.1 | |
| Medium | CVE-2018-16876 | Red Hat Ansible: Exposure of Sensitive Information to an Unauthorized Actor | 3.1 | |
| Medium | CVE-2019-10156 | Red Hat Ansible: Exposure of Sensitive Information to an Unauthorized Actor | 4.6 | |
| Medium | CVE-2020-10753 | Red Hat Ceph Storage: HTTP Request/Response Splitting | 5.4 | |
| High | CVE-2017-2627 | Red Hat Openstack-tripleo-common: Path Traversal | 8.2 | |
| High | CVE-2019-14905 | Red Hat Ansible: External Control of File Name or Path | 7.3 | |
| Medium | CVE-2026-54421 | OpenStack Ironic: Improper Removal of Sensitive Information Before Storage or Transfer | 6.8 | |
| Medium | CVE-2020-1758 | Red Hat Keycloak: Improper Validation of Certificate with Host Mismatch | 5.3 | |
| High | CVE-2019-14846 | Red Hat Ansible: Improper Output Neutralization for Logs | 7.3 | |
| High | CVE-2020-10684 | Red Hat Ansible: Code Injection | 7.9 | |
| Critical | CVE-2018-14620 | Red Hat Openstack-rabbitmq-container: Download of Code Without Integrity Check | 4.7 | |
| Medium | CVE-2017-2621 | Red Hat Openstack-heat: Files or Directories Accessible to External Parties | 5.9 | |
| Medium | CVE-2020-1733 | Red Hat Ansible: Insecure Temporary File | 5.0 | |
| Medium | CVE-2020-1735 | Red Hat Ansible: Path Traversal | 4.2 | |
| Medium | CVE-2020-10685 | Red Hat Ansible: Incomplete Cleanup | 5.0 | |
| High | CVE-2022-3261 | Plain-text passwords saved in /var/log/messages | 4.4 | |
| Low | CVE-2020-1738 | Red Hat Ansible: Argument Injection | 3.9 |