redhat openstack platform

Name: redhat openstack platform
Brand: redhat

productUS

cpe:2.3:a:redhat:openstack_platform:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical16high17medium2low

updated 2026-10-28

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	3 versions
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	3 versions
CVE-2021-3654US	medium6.1	26.8% (98th)	—	no fix	2022-03-02	2 versions
CVE-2021-20270US	high7.5	2.76% (86th)	—	no fix	2021-03-23	= 10.0
CVE-2022-2132US	high8.6	2.39% (84th)	—	no fix	2022-08-31	= 13.0
CVE-2021-3563US	high7.4OT elevated	1.86% (79th)	—	no fix	2022-08-26	4 versions
CVE-2022-0718US	medium4.9	1.86% (79th)	—	no fix	2022-08-29	= 16.1
CVE-2023-1108US	high7.5	1.77% (78th)	—	no fix	2023-09-14	= 13.0
CVE-2017-15114US	high8.1	1.70% (77th)	—	no fix	2017-11-27	= 12.0
CVE-2020-25658US	medium5.9OT elevated	1.65% (76th)	—	no fix	2020-11-12	2 versions
CVE-2023-3354US	high7.5	1.61% (76th)	—	no fix	2023-07-11	= 13.0
CVE-2023-3637US	medium6.5	1.31% (70th)	—	no fix	2023-07-25	2 versions
CVE-2022-23452US	medium4.9OT elevated	1.29% (70th)	—	no fix	2022-09-01	= 16.1
CVE-2022-23451US	high8.1OT elevated	1.25% (69th)	—	no fix	2022-09-06	3 versions
CVE-2023-1668US	high8.2	1.22% (68th)	—	no fix	2023-04-10	3 versions
CVE-2022-3596US	high7.5	1.11% (66th)	—	no fix	2023-09-20	= 13.0
CVE-2022-3277US	medium6.5	1.06% (65th)	—	no fix	2023-03-06	3 versions
CVE-2021-20267US	high7.1OT elevated	1.02% (63rd)	—	no fix	2021-05-28	4 versions
CVE-2023-5625US	high7.5	0.97% (62nd)	—	no fix	2023-11-01	= 17.1
CVE-2022-0866US	medium5.3OT elevated	0.90% (60th)	—	no fix	2022-05-10	= 13.0
CVE-2020-10731US	critical9.9	0.89% (59th)	—	no fix	2020-07-31	3 versions
CVE-2022-2447US	medium6.6	0.72% (54th)	—	no fix	2022-09-01	2 versions
CVE-2023-1625US	medium5.0	0.71% (54th)	—	no fix	2023-09-24	4 versions
CVE-2021-3979US	medium6.5OT elevated	0.57% (47th)	—	no fix	2022-08-25	= 13.0
CVE-2023-1932US	—	0.49% (42nd)	—	no fix	2024-11-07	= 13.0
CVE-2023-1636US	medium5.0	0.48% (41st)	—	no fix	2023-09-24	3 versions
CVE-2020-25743US	low3.2	0.47% (40th)	—	no fix	2020-10-06	= 13.0
CVE-2022-3100US	medium5.9	0.44% (38th)	—	no fix	2023-01-18	= 13.0
CVE-2024-7319US	—	0.39% (33rd)	—	no fix	2024-08-02	4 versions
CVE-2024-8007US	high8.1	0.39% (33rd)	—	no fix	2024-08-21	3 versions
CVE-2020-14394US	low3.2	0.39% (33rd)	—	no fix	2022-08-17	2 versions
CVE-2021-20257US	medium6.5	0.37% (31st)	—	no fix	2022-03-16	2 versions
CVE-2019-12067US	medium6.5	0.31% (23rd)	—	no fix	2021-06-02	2 versions
CVE-2020-27781US	high7.1	0.29% (22nd)	—	no fix	2020-12-18	= 13.0
CVE-2022-3261US	high7.5OT elevated	0.29% (22nd)	—	no fix	2023-09-15	= 16.2
CVE-2020-14365US	high7.1	0.23% (14th)	—	no fix	2020-09-23	2 versions
CVE-2020-1690US	medium6.5	0.22% (13th)	—	no fix	2021-06-07	2 versions
CVE-2023-6725US	—	0.20% (10th)	—	no fix	2024-03-15	= 17.1
CVE-2023-1633US	medium5.5	0.19% (9th)	—	no fix	2023-09-24	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')4 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-522Insufficiently Protected Credentials3 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan