Red Hat OpenStack

Name: Red Hat OpenStack
Brand: Red Hat

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical10high17medium0low

updated 2026-10-27

vulnerabilities (44)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-14234US	critical9.8	47.7% (99th)	Exploit	no fix	2019-08-09	≤ 15
CVE-2022-28346US	critical9.8	18.7% (97th)	Exploit	16.1.9	2022-04-12	2 versions
CVE-2024-34069US	—	3.40% (89th)	Exploit	no fix	2024-05-06	2 versions
CVE-2021-3654US	medium6.1	26.8% (98th)	—	16.2	2022-03-02	< 16.2
CVE-2019-14232US	high7.5	3.53% (89th)	—	no fix	2019-08-02	≤ 15
CVE-2019-14233US	high7.5	3.17% (88th)	—	no fix	2019-08-02	≤ 15
CVE-2019-14235US	high7.5	3.07% (88th)	—	no fix	2019-08-02	≤ 15
CVE-2023-36053US	high7.5	2.98% (87th)	—	17.1	2023-07-03	< 17.1
CVE-2022-31116US	high7.5	2.54% (85th)	—	16.2.4	2022-07-05	2 versions
CVE-2019-10768US	high7.5	1.98% (80th)	—	17.0	2019-11-19	< 17.0
CVE-2022-31117US	medium5.9	1.88% (79th)	—	16.1.9	2022-07-05	2 versions
CVE-2022-0718US	medium4.9	1.86% (79th)	—	16.2	2022-08-29	< 16.2
CVE-2023-41419US	critical9.8	1.79% (78th)	—	17.1	2023-09-25	2 versions
CVE-2021-40797US	medium6.5	1.77% (78th)	—	16.2	2021-09-08	< 16.2
CVE-2024-24680US	high7.5	1.61% (76th)	—	17.1	2024-02-06	< 17.1
CVE-2024-1394US	—	1.53% (75th)	—	17.1	2024-03-21	< 17.1
CVE-2022-37026US	critical9.8	1.49% (74th)	—	16.2.4	2022-09-21	2 versions
CVE-2023-46118US	medium4.9	1.32% (71st)	—	17.1	2023-10-25	< 17.1
CVE-2023-3637US	medium6.5	1.31% (70th)	—	16.1.9	2023-07-25	2 versions
CVE-2023-45287US	high7.5	1.25% (69th)	—	17.1	2023-12-05	< 17.1
CVE-2023-39326US	medium5.3	1.21% (68th)	—	17.1	2023-12-06	< 17.1
CVE-2021-27025US	medium6.5	1.11% (66th)	—	16.1.9	2021-11-18	2 versions
CVE-2023-41040US	medium6.5	1.09% (65th)	—	17.1	2023-08-30	< 17.1
CVE-2022-3277US	medium6.5	1.06% (65th)	—	16.1.9	2023-03-06	2 versions
CVE-2022-47951US	medium5.7	1.03% (64th)	—	17.0	2023-01-26	< 17.0
CVE-2022-47950US	medium6.5	1.01% (63rd)	—	17.0	2023-01-18	< 17.0
CVE-2024-22195US	medium6.1	0.89% (59th)	—	17.1	2024-01-11	< 17.1
CVE-2024-32498US	medium6.5	0.83% (58th)	—	16.2.6	2024-07-05	2 versions
CVE-2024-4438US	—	0.79% (56th)	—	17.1	2024-05-08	< 17.1
CVE-2021-4180US	medium4.3	0.77% (55th)	—	16.2	2022-03-23	< 16.2
CVE-2023-1625US	medium5.0	0.71% (54th)	—	no fix	2023-09-24	≤ heat <=22.0.1
CVE-2022-2996US	high7.4	0.66% (51st)	—	16.2.4	2022-09-01	2 versions
CVE-2024-47211US	—	0.66% (52nd)	—	no fix	2024-10-04	≤ Platform Antelope <18.0.4
CVE-2026-22797US	—	0.65% (51st)	—	no fix	2026-01-19	3 versions
CVE-2025-43859US	—	0.59% (48th)	—	no fix	2025-04-24	≤ Wallaby 17.1
CVE-2024-44082US	—OT elevated	0.55% (46th)	—	no fix	2024-09-06	≤ Platform <17.1.4
CVE-2023-6110US	—	0.52% (44th)	—	17.1	2024-11-17	< 17.1
CVE-2023-40590US	high7.8	0.51% (43rd)	—	17.1	2023-08-28	< 17.1
CVE-2026-55707US	—OT elevated	0.43% (37th)	—	no fix	2026-08-05	3 versions
CVE-2026-40683US	—	0.34% (27th)	—	no fix	2026-04-14	≤ Keystone <28.0.1
CVE-2025-11678US	—	0.29% (21st)	—	no fix	2025-10-20	≤ Wallaby <17.1
CVE-2024-1141US	medium5.5	0.23% (13th)	—	17.1	2024-02-01	< 17.1
CVE-2023-6725US	—	0.20% (10th)	—	17.1	2024-03-15	< 17.1
CVE-2024-4840US	—OT elevated	0.20% (9th)	—	17.1	2024-05-14	< 17.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption8 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-552Files or Directories Accessible to External Parties3 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-532Insertion of Sensitive Information into Log File2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)44 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan