Product by Red Hat
Red Hat Openstack Platform 18.0
25 known vulnerabilities in Red Hat Openstack Platform 18.0 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1394 | Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads | 7.5 | |
| Medium | CVE-2013-0270 | Keystone: openstack keystone: denial of service via large http request with long tenant name | 6.5 | |
| High | CVE-2013-0335 | Openstack nova: vnc proxy can connect to the wrong vm | 7.6 | |
| High | CVE-2026-87874 | Red Hat: Deserialization of Untrusted Data | 8.1 | |
| High | CVE-2026-89091 | Red Hat Migration Toolkit for Applications 8: Link Following | 8.8 | |
| High | CVE-2026-92982 | Red Hat Ansible Automation Platform 2.6: Improper Neutralization of Special Elements Used in a Template Engine | 8.5 | |
| Medium | CVE-2012-5571 | Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling | 5.4 | |
| Critical | CVE-2026-107935 | Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose | 9.3 | |
| High | CVE-2026-83535 | Red Hat OpenStack Platform 18.0: Observable Timing Discrepancy | 7.4 | |
| High | CVE-2024-4438 | Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform | 7.5 | |
| High | CVE-2024-4437 | Etcd: incomplete fix for cve-2021-44716 in openstack platform | 7.5 | |
| High | CVE-2024-4436 | Etcd: incomplete fix for cve-2022-41723 in openstack platform | 7.5 | |
| Medium | CVE-2023-3637 | Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) | 4.3 | |
| Medium | CVE-2026-83536 | Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris) | 5.3 | |
| Medium | CVE-2026-87872 | Red Hat: Improper Certificate Validation | 6.8 | |
| Medium | CVE-2026-34956 | Openvswitch: open vswitch: denial of service via malformed ftp epasv command | 5.9 | |
| High | CVE-2026-11837 | Red Hat: Link Following | 7.3 | |
| Medium | CVE-2026-80158 | Red Hat: Invocation of Process Using Visible Sensitive Information | 5.5 | |
| Medium | CVE-2023-6110 | Openstack: deleting a non existing access rule deletes another existing access rule in it's scope | 5.5 | |
| Low | CVE-2026-114236 | Red Hat Confidential Compute Attestation: Missing Release of Resource after Effective Lifetime | 3.3 | |
| Medium | CVE-2025-14010 | Ansible-collections Ansible Community General Collection: Information Disclosure | 5.5 | |
| Medium | CVE-2024-43168 | Unbound: heap-buffer-overflow in unbound | 4.8 | |
| Medium | CVE-2024-1141 | Glance-store: glance store access key logged in debug log level | 5.5 | |
| Medium | CVE-2023-6725 | Tripleo-ansible: bind keys are world readable | 5.5 | |
| Low | CVE-2024-43167 | Unbound: null pointer dereference in unbound | 2.8 |