openstack neutron

Name: openstack neutron
Brand: openstack

productUS

cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical6high14medium3low

updated 2026-10-27

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-3221US	medium4.0	11.4% (96th)	Exploit	2014.2.4	2015-08-26	2 versions
CVE-2015-8914US	critical9.1	4.28% (91st)	—	7.0.4	2016-06-17	2 versions
CVE-2014-7821US	medium4.0	3.94% (90th)	—	2014.2.1	2014-11-24	2 versions
CVE-2019-9735US	medium6.5	3.71% (90th)	—	11.0.7	2019-03-13	4 versions
CVE-2016-5362US	high8.2	3.44% (89th)	—	7.0.4	2016-06-17	2 versions
CVE-2013-6433US	high7.6	3.32% (89th)	—	no fix	2014-06-02	2013.1 → 2013.2.3
CVE-2016-5363US	high8.2	3.27% (88th)	—	no fix	2016-06-17	7 versions
CVE-2014-0187US	high9.0	3.00% (87th)	—	no fix	2014-04-28	11 versions
CVE-2014-4615US	medium5.0	2.77% (86th)	—	no fix	2014-08-19	3 versions
CVE-2018-14635US	medium6.5	2.53% (85th)	—	no fix	2018-09-10	3 versions
CVE-2014-3632US	high7.6	2.50% (85th)	—	no fix	2014-10-07	2014.1 → 2014.1.2
CVE-2014-3555US	medium4.0	2.21% (82nd)	—	no fix	2014-07-23	4 versions
CVE-2014-6414US	medium4.0	2.09% (82nd)	—	2014.1.2	2014-10-02	3 versions
CVE-2014-8153US	medium4.0	1.92% (80th)	—	no fix	2015-01-15	2 versions
CVE-2017-7543US	medium5.9	1.84% (79th)	—	8.3.0-11.1	2018-07-26	4 versions
CVE-2021-40085US	medium6.5	1.83% (79th)	—	16.4.1	2021-08-31	3 versions
CVE-2021-40797US	medium6.5	1.77% (78th)	—	18.1.1	2021-09-08	3 versions
CVE-2019-10876US	medium6.5	1.73% (77th)	—	13.0.3	2019-04-05	3 versions
CVE-2014-4167US	low3.5	1.66% (77th)	—	no fix	2014-07-11	3 versions
CVE-2014-0056US	low2.1	1.44% (73rd)	—	no fix	2014-05-08	14 versions
CVE-2021-38598US	critical9.1OT elevated	1.22% (69th)	—	16.4.1	2021-08-23	3 versions
CVE-2018-14636US	medium5.3	1.17% (67th)	—	no fix	2018-09-10	3 versions
CVE-2022-3277US	medium6.5	1.06% (65th)	—	18.6.0	2023-03-06	2 versions
CVE-2021-20267US	high7.1OT elevated	1.02% (63rd)	—	16.3.3	2021-05-28	3 versions
CVE-2015-5240US	low3.5	0.97% (62nd)	—	no fix	2015-10-27	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2646 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-254CWE-2544 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-923Improper Restriction of Communication Channel to Intended Endpoints2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-287Improper Authentication1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan