Red Hat OpenStack 16.2

productDE

cpe:/a:redhat:openstack:16.2

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical8high9medium0low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-39320US	critical9.8	1.76% (78th)	Exploit	no fix	2023-09-08	—
CVE-2024-40094US	—	0.94% (61st)	Exploit	no fix	2024-07-30	—
CVE-2024-47561US	—	3.26% (88th)	—	no fix	2024-10-03	—
CVE-2022-30321US	high8.6	3.11% (88th)	—	no fix	2022-05-25	—
CVE-2021-44549US	high7.4	2.08% (81st)	—	no fix	2021-12-14	—
CVE-2022-26945US	critical9.8	1.74% (78th)	—	no fix	2022-05-25	—
CVE-2024-24680US	high7.5	1.61% (76th)	—	no fix	2024-02-06	—
CVE-2022-21235US	critical9.8	1.58% (75th)	—	no fix	2022-04-01	—
CVE-2024-1394US	—	1.53% (75th)	—	no fix	2024-03-21	—
CVE-2022-30323US	high8.6	1.46% (73rd)	—	no fix	2022-05-25	—
CVE-2022-30322US	high8.6	1.46% (73rd)	—	no fix	2022-05-25	—
CVE-2023-39322US	high7.5	1.34% (71st)	—	no fix	2023-09-08	—
CVE-2023-39321US	high7.5	1.34% (71st)	—	no fix	2023-09-08	—
CVE-2023-45287US	high7.5	1.25% (69th)	—	no fix	2023-12-05	—
CVE-2023-39326US	medium5.3	1.21% (68th)	—	no fix	2023-12-06	—
CVE-2023-2088US	medium6.5	1.20% (68th)	—	no fix	2023-05-12	—
CVE-2023-39318US	medium6.1	0.93% (60th)	—	no fix	2023-09-08	—
CVE-2023-39319US	medium6.1	0.91% (60th)	—	no fix	2023-09-08	—
CVE-2024-22195US	medium6.1	0.89% (59th)	—	no fix	2024-01-11	—
CVE-2023-46137US	medium5.3	0.88% (59th)	—	no fix	2023-10-25	—
CVE-2024-4438US	—	0.79% (56th)	—	no fix	2024-05-08	—
CVE-2024-53916US	—OT elevated	0.71% (53rd)	—	no fix	2024-11-25	—
CVE-2022-1655US	medium6.5	0.55% (46th)	—	no fix	2022-07-22	—
CVE-2023-6110US	—	0.52% (44th)	—	no fix	2024-11-17	—
CVE-2022-3100US	medium5.9	0.44% (38th)	—	no fix	2023-01-18	—
CVE-2024-1141US	medium5.5	0.23% (13th)	—	no fix	2024-02-01	—
CVE-2023-6725US	—	0.20% (10th)	—	no fix	2024-03-15	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')5 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-1220Insufficient Granularity of Access Control1 CVEs
CWE-203Observable Discrepancy1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan