openstack compute

Name: openstack compute
Brand: openstack

productUS

cpe:2.3:a:openstack:compute:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high6medium5low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-4179US	medium4.3	2.73% (86th)	—	no fix	2013-09-16	= 2013.1.3
CVE-2012-2654US	medium4.3	2.60% (85th)	—	no fix	2012-06-21	= 2012.2
CVE-2013-7130US	high7.1	2.44% (84th)	—	no fix	2014-02-06	5 versions
CVE-2013-4185US	medium4.0	2.10% (82nd)	—	2013.2.3	2013-10-29	2 versions
CVE-2012-3371US	low3.5	1.86% (79th)	—	no fix	2012-07-17	= 2012.2
CVE-2014-0167US	medium6.0OT elevated	1.65% (76th)	—	no fix	2014-04-15	8 versions
CVE-2013-4278US	low3.5	1.51% (74th)	—	no fix	2013-09-16	—
CVE-2014-0134US	low3.5	1.49% (74th)	—	no fix	2014-05-08	3 versions
CVE-2013-2255US	medium5.9	0.97% (62nd)	—	no fix	2019-11-01	= 2013.1
CVE-2014-2573US	low2.3	0.70% (53rd)	—	no fix	2014-03-25	3 versions
CVE-2015-2687US	medium4.7	0.34% (27th)	—	no fix	2017-08-09	16 versions
CVE-2013-2030US	low2.1OT elevated	0.24% (15th)	—	no fix	2013-12-27	4 versions

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2644 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-295Improper Certificate Validation1 CVEs
CWE-310CWE-3101 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.