Product by Red Hat
Red Hat Openstack Platform 16.2
31 known vulnerabilities in Red Hat Openstack Platform 16.2 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
31
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1394 | Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads | 7.5 | |
| Medium | CVE-2013-0270 | Keystone: openstack keystone: denial of service via large http request with long tenant name | 6.5 | |
| High | CVE-2013-0335 | Openstack nova: vnc proxy can connect to the wrong vm | 7.6 | |
| High | CVE-2026-92982 | Red Hat Ansible Automation Platform 2.6: Improper Neutralization of Special Elements Used in a Template Engine | 8.5 | |
| High | CVE-2024-3727 | Containers/image: digest type does not guarantee valid type | 8.3 | |
| Medium | CVE-2012-5571 | Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling | 5.4 | |
| Medium | CVE-2026-92091 | Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array | 5.9 | |
| High | CVE-2024-4438 | Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform | 7.5 | |
| High | CVE-2024-4437 | Etcd: incomplete fix for cve-2021-44716 in openstack platform | 7.5 | |
| High | CVE-2024-4436 | Etcd: incomplete fix for cve-2022-41723 in openstack platform | 7.5 | |
| Medium | CVE-2024-9355 | Golang-fips: golang fips zeroed buffer | 6.5 | |
| Medium | CVE-2023-3637 | Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) | 4.3 | |
| Medium | CVE-2026-80179 | Jwcrypto: jwcrypto: denial of service via malformed jwe tokens | 5.9 | |
| High | CVE-2023-1625 | Information leak in api | 7.4 | |
| Medium | CVE-2021-4472 | Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature | 6.5 | |
| Medium | CVE-2026-84828 | Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token | 6.5 | |
| Medium | CVE-2026-34956 | Openvswitch: open vswitch: denial of service via malformed ftp epasv command | 5.9 | |
| High | CVE-2024-8007 | Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors | 8.1 | |
| Medium | CVE-2026-84185 | Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification | 5.9 | |
| Medium | CVE-2023-6110 | Openstack: deleting a non existing access rule deletes another existing access rule in it's scope | 5.5 | |
| High | CVE-2023-5366 | Openvswitch don't match packets on nd_target field | 7.1 | |
| Medium | CVE-2023-1636 | Incomplete container isolation | 6.0 | |
| Low | CVE-2025-8556 | Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results | 3.7 | |
| Medium | CVE-2024-7319 | Openstack-heat: incomplete fix for cve-2023-1625 | 5.0 | |
| Medium | CVE-2023-1633 | Insecure barbican configuration file leaking credential | 6.6 |