openstack essex

Name: openstack essex
Brand: openstack

productUS

cpe:2.3:a:openstack:essex:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high11medium3low

updated 2026-10-28

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2012-4573US	medium5.5	3.35% (89th)	—	no fix	2012-11-11	= 2012.1
CVE-2012-3360US	medium5.5	3.02% (87th)	—	no fix	2012-07-22	= 2012.1
CVE-2012-5482US	medium5.5	2.74% (86th)	—	no fix	2012-11-11	= 2012.1
CVE-2013-1838US	medium4.0	2.74% (86th)	—	no fix	2013-03-22	= 2012.1
CVE-2012-3361US	medium5.5	2.60% (85th)	—	no fix	2012-07-22	= 2012.1
CVE-2012-2654US	medium4.3	2.60% (85th)	—	no fix	2012-06-21	= 2012.1
CVE-2013-0208US	medium6.5	2.50% (85th)	—	no fix	2013-02-13	—
CVE-2012-3542US	medium4.3	2.50% (85th)	—	no fix	2012-09-05	= 2012.1
CVE-2012-3426US	medium4.9	2.30% (83rd)	—	no fix	2012-07-31	—
CVE-2013-0335US	high7.6OT elevated	2.14% (82nd)	—	no fix	2013-03-22	= 2012.1
CVE-2012-5571US	low3.5	2.05% (81st)	—	no fix	2012-12-18	= 2012.1
CVE-2012-3371US	low3.5	1.86% (79th)	—	no fix	2012-07-17	= 2012.1
CVE-2012-0030US	medium4.9	1.69% (77th)	—	no fix	2012-01-13	—
CVE-2013-0261US	medium4.4	0.34% (28th)	—	no fix	2013-03-08	—
CVE-2013-0266US	low2.1OT elevated	0.27% (19th)	—	no fix	2013-03-08	—

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2649 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-255CWE-2551 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-399CWE-3991 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.