[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjwqeTmomlTO8I7ffCKNVLwWswFA5-x3tSkMnXkLF5dU":3,"g5a-ex:openstack\u002Fheat@*":121,"g5a-family:openstack\u002Fheat":123},{"success":4,"data":5},true,{"product":6,"versions":41,"topVulnerabilitiesByEpss":54,"kevVulnerabilities":98,"seoMetadata":99,"meta":118},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":40},"openstack","heat",12,7,0,"2024-08-02",[14,18,20,22,24,26,28,30,32,34,36,38],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2013.2",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"2013.2.1",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"2013.2.2",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"2013.2.3",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"2014.1",{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},"2015.2",{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},"5.0.0",{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},"5.0.3",{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},"6.0.0",{"version":35,"cve_count":16,"kev_count":11,"has_kev":17},"6.1.0",{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},"7.0.0",{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},"8.0.0","Heat by Openstack is a technology product with 12 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[42,43,44,45,46,47,48,49,50,51,52,53],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},{"version":35,"cve_count":16,"kev_count":11,"has_kev":17},{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},[55,63,70,77,81,88,94],{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":17,"epssScore":62},"CVE-2013-6428","The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenant_id in the request path.","2013-12-14",4,"v2","Medium",0.01744,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":60,"severity":68,"isKev":17,"epssScore":69},"CVE-2014-3801","OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.","2014-05-23",3.5,"Low",0.01634,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":75,"severity":61,"isKev":17,"epssScore":76},"CVE-2016-9185","In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. Affected versions are \u003C=5.0.3, >=6.0.0 \u003C=6.1.0, and ==7.0.0.","2016-11-04",4.3,"v3.0",0.01537,{"cveId":78,"description":79,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":17,"epssScore":80},"CVE-2013-6426","The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and (1) create a stack via the CreateStack method or (2) update a stack via the UpdateStack method.",0.0103,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":86,"severity":61,"isKev":17,"epssScore":87},"CVE-2023-1625","An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.","2023-09-24",5,"v3.1",0.00715,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":86,"severity":61,"isKev":17,"epssScore":93},"CVE-2017-2621","An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.","2018-07-27",5.5,0.00413,{"cveId":95,"description":96,"publishedDate":12,"cvssScore":85,"cvssVersion":86,"severity":61,"isKev":17,"epssScore":97},"CVE-2024-7319","An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.",0.00394,[],{"title":100,"metaDescription":101,"keywords":102,"structuredData":103},"Heat by Openstack - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Heat by Openstack covering 12 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Heat vulnerabilities, Heat security, Heat CVE, Openstack Heat, Heat threat intelligence, Openstack security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":104,"@type":105,"name":106,"description":101,"url":107,"manufacturer":108,"applicationCategory":112,"softwareVersion":113,"mainEntity":114},"https:\u002F\u002Fschema.org","SoftwareApplication","Heat","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fopenstack\u002Fheat",{"@type":109,"name":110,"url":111},"Organization","Openstack","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fopenstack","Security Software","12 versions tracked",{"@type":115,"name":116,"description":117,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Heat Security Vulnerabilities","Security vulnerabilities affecting Heat by Openstack",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":119,"apiVersion":120},"2026-10-18T16:38:19.566Z","3.0",{"rows":122,"total":11,"capped":17,"failed":11},[],[]]