openstack glance

Name: openstack glance
Brand: openstack

productUS

cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high6medium4low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-5162US	high7.5	3.09% (88th)	—	no fix	2016-10-07	3 versions
CVE-2013-4428US	low3.5	3.08% (88th)	—	2013.1.4	2013-10-27	3 versions
CVE-2016-8611US	medium6.5	2.30% (83rd)	—	no fix	2018-07-31	—
CVE-2017-7200US	medium5.8	2.06% (81st)	—	11.0.0	2017-03-21	< 11.0.0
CVE-2015-5163US	low3.5	1.50% (74th)	—	no fix	2015-08-19	2 versions
CVE-2013-1840US	low3.5	1.37% (72nd)	—	no fix	2013-03-22	= v1
CVE-2015-3289US	medium4.0	1.31% (70th)	—	no fix	2015-08-14	≤ 2015.1.0
CVE-2015-8234US	medium5.5	1.26% (70th)	—	no fix	2017-03-29	= 11.0.0
CVE-2022-47951US	medium5.7	1.03% (64th)	—	24.1.1	2023-01-26	2 versions
CVE-2024-32498US	medium6.5	0.83% (58th)	—	28.0.2	2024-07-05	3 versions
CVE-2022-4134US	low2.8	0.33% (26th)	—	no fix	2023-03-06	—
CVE-2026-34881US	—	0.28% (20th)	—	29.1.1	2026-03-31	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-399CWE-3992 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-552Files or Directories Accessible to External Parties2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.