openstack swift

Name: openstack swift
Brand: openstack

productUS

cpe:2.3:a:openstack:swift:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical2high11medium0low

updated 2026-10-28

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-16613US	critical9.8	8.42% (95th)	—	no fix	2017-11-21	≤ 2.15.1
CVE-2012-4406US	critical9.8	6.57% (94th)	—	1.7.0	2012-10-22	< 1.7.0
CVE-2015-1856US	medium5.5	3.95% (90th)	—	no fix	2015-04-17	≤ 2.2.2
CVE-2016-0738US	high7.5	3.85% (90th)	—	no fix	2016-01-29	3 versions
CVE-2016-0737US	high7.5	3.82% (90th)	—	no fix	2016-01-29	≤ 2.3.0
CVE-2014-7960US	medium4.0	3.05% (87th)	—	no fix	2014-10-17	≤ 2.1.0
CVE-2015-5223US	medium5.0	2.60% (85th)	—	no fix	2015-10-26	≤ 2.3.0
CVE-2014-3497US	medium4.3	2.10% (82nd)	—	no fix	2014-07-03	4 versions
CVE-2014-0006US	medium4.3	1.91% (80th)	—	no fix	2014-01-23	16 versions
CVE-2013-4155US	medium4.0	1.68% (77th)	—	no fix	2013-08-20	24 versions
CVE-2022-47950US	medium6.5	1.01% (63rd)	—	2.29.2	2023-01-18	3 versions
CVE-2017-8761US	medium4.3	0.80% (56th)	—	no fix	2021-06-02	3 versions
CVE-2013-6396US	medium5.8	0.73% (54th)	—	no fix	2014-02-18	26 versions
CVE-2026-49017US	medium6.5	0.36% (29th)	—	2.37.2	2026-05-27	3 versions
CVE-2026-50221US	medium5.4	0.22% (12th)	—	2.37.2	2026-06-23	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-399CWE-3993 CVEs
CWE-117Improper Output Neutralization for Logs1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-264CWE-2641 CVEs
CWE-287Improper Authentication1 CVEs
CWE-295Improper Certificate Validation1 CVEs
CWE-310CWE-3101 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.