Product by Red Hat
Red Hat Openstack Platform 17.1
26 known vulnerabilities in Red Hat Openstack Platform 17.1 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1394 | Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads | 7.5 | |
| Medium | CVE-2013-0270 | Keystone: openstack keystone: denial of service via large http request with long tenant name | 6.5 | |
| High | CVE-2013-0335 | Openstack nova: vnc proxy can connect to the wrong vm | 7.6 | |
| High | CVE-2026-87874 | Red Hat: Deserialization of Untrusted Data | 8.1 | |
| High | CVE-2026-89091 | Red Hat Migration Toolkit for Applications 8: Link Following | 8.8 | |
| High | CVE-2026-92982 | Red Hat Ansible Automation Platform 2.6: Improper Neutralization of Special Elements Used in a Template Engine | 8.5 | |
| Medium | CVE-2012-5625 | Openstack nova: information leak in libvirt lvm-backed instances | 6.5 | |
| Medium | CVE-2012-5571 | Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling | 5.4 | |
| Medium | CVE-2026-92091 | Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array | 5.9 | |
| Medium | CVE-2013-1840 | Red Hat OpenStack Folsom for RHEL 6: Insertion of Sensitive Information Into Sent Data | 6.5 | |
| High | CVE-2024-4436 | Etcd: incomplete fix for cve-2022-41723 in openstack platform | 7.5 | |
| High | CVE-2024-4437 | Etcd: incomplete fix for cve-2021-44716 in openstack platform | 7.5 | |
| Medium | CVE-2024-9355 | Golang-fips: golang fips zeroed buffer | 6.5 | |
| Medium | CVE-2023-3637 | Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) | 4.3 | |
| High | CVE-2026-75092 | Red Hat: Execution with Unnecessary Privileges | 7.3 | |
| Medium | CVE-2026-87872 | Red Hat: Improper Certificate Validation | 6.8 | |
| Medium | CVE-2021-4472 | Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature | 6.5 | |
| Medium | CVE-2026-84828 | Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token | 6.5 | |
| Medium | CVE-2026-34956 | Openvswitch: open vswitch: denial of service via malformed ftp epasv command | 5.9 | |
| High | CVE-2026-11837 | Red Hat: Link Following | 7.3 | |
| Medium | CVE-2026-80158 | Red Hat: Invocation of Process Using Visible Sensitive Information | 5.5 | |
| Low | CVE-2025-8556 | Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results | 3.7 | |
| Medium | CVE-2025-14010 | Ansible-collections Ansible Community General Collection: Information Disclosure | 5.5 | |
| Medium | CVE-2024-43168 | Unbound: heap-buffer-overflow in unbound | 4.8 | |
| Medium | CVE-2023-6725 | Tripleo-ansible: bind keys are world readable | 5.5 |