# Openstack vulnerabilities

> Openstack has 257 published vulnerabilities across 67 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Keystone, with 38. If you run Openstack software, patch the exploited flaws first.

Canonical page: https://www.precursorintelligence.com/vendors/openstack

## At a glance

- **Published vulnerabilities:** 257
- **Known to be exploited:** 0
- **Products:** 67
- **Versions:** 1,890

## Which Openstack products have the most vulnerabilities?

- [Keystone](https://www.precursorintelligence.com/product/openstack/keystone): 38 published vulnerabilities, 86 versions
- [Nova](https://www.precursorintelligence.com/product/openstack/nova): 38 published vulnerabilities, 161 versions
- [Folsom](https://www.precursorintelligence.com/product/openstack/folsom): 26 published vulnerabilities, 9 versions
- [Neutron](https://www.precursorintelligence.com/product/openstack/neutron): 25 published vulnerabilities, 154 versions
- [Horizon](https://www.precursorintelligence.com/product/openstack/horizon): 22 published vulnerabilities, 87 versions
- [Essex](https://www.precursorintelligence.com/product/openstack/essex): 16 published vulnerabilities, 1 version
- Image Registry and Delivery Service (glance): 15 published vulnerabilities, 25 versions
- [Swift](https://www.precursorintelligence.com/product/openstack/swift): 14 published vulnerabilities, 56 versions
- [Grizzly](https://www.precursorintelligence.com/product/openstack/grizzly): 14 published vulnerabilities, 6 versions
- [Compute](https://www.precursorintelligence.com/product/openstack/compute): 12 published vulnerabilities, 26 versions

Each product page lists its own known-exploited flaws.

## Which Openstack vulnerabilities are being exploited?

None of Openstack's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

## Which Openstack flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2017-18017](https://www.precursorintelligence.com/what-is/cve-2017-18017): 53%, Critical (CVSS 9.8)
- [CVE-2021-3654](https://www.precursorintelligence.com/what-is/cve-2021-3654): 27%, Medium (CVSS 6.1)
- [CVE-2015-3221](https://www.precursorintelligence.com/what-is/cve-2015-3221): 11%, Medium (CVSS 4.0)
- [CVE-2017-16613](https://www.precursorintelligence.com/what-is/cve-2017-16613): 8.4%, Critical (CVSS 9.8)
- [CVE-2012-4406](https://www.precursorintelligence.com/what-is/cve-2012-4406): 6.6%, Critical (CVSS 9.8)
- [CVE-2020-12691](https://www.precursorintelligence.com/what-is/cve-2020-12691): 4.9%, High (CVSS 8.8)
- [CVE-2013-1664](https://www.precursorintelligence.com/what-is/cve-2013-1664): 4.8%, Medium (CVSS 5.0)
- [CVE-2013-1665](https://www.precursorintelligence.com/what-is/cve-2013-1665): 4.5%, Medium (CVSS 5.0)
- [CVE-2015-8914](https://www.precursorintelligence.com/what-is/cve-2015-8914): 4.3%, Critical (CVSS 9.1)
- [CVE-2012-4456](https://www.precursorintelligence.com/what-is/cve-2012-4456): 4.0%, High (CVSS 7.5)

## All Openstack products we track

56 products with at least one tracked version, most vulnerabilities first:

- [Keystone](https://www.precursorintelligence.com/product/openstack/keystone): 38 vulnerabilities, 86 versions
- [Nova](https://www.precursorintelligence.com/product/openstack/nova): 38 vulnerabilities, 161 versions
- [Folsom](https://www.precursorintelligence.com/product/openstack/folsom): 26 vulnerabilities, 9 versions
- [Neutron](https://www.precursorintelligence.com/product/openstack/neutron): 25 vulnerabilities, 154 versions
- [Horizon](https://www.precursorintelligence.com/product/openstack/horizon): 22 vulnerabilities, 87 versions
- [Essex](https://www.precursorintelligence.com/product/openstack/essex): 16 vulnerabilities, 1 version
- Image Registry and Delivery Service (glance): 15 vulnerabilities, 25 versions
- [Swift](https://www.precursorintelligence.com/product/openstack/swift): 14 vulnerabilities, 56 versions
- [Grizzly](https://www.precursorintelligence.com/product/openstack/grizzly): 14 vulnerabilities, 6 versions
- [Compute](https://www.precursorintelligence.com/product/openstack/compute): 12 vulnerabilities, 26 versions
- [Glance](https://www.precursorintelligence.com/product/openstack/glance): 11 vulnerabilities, 86 versions
- [Havana](https://www.precursorintelligence.com/product/openstack/havana): 11 vulnerabilities, 4 versions
- [Cinder](https://www.precursorintelligence.com/product/openstack/cinder): 9 vulnerabilities, 151 versions
- [Heat](https://www.precursorintelligence.com/product/openstack/heat): 7 vulnerabilities, 12 versions
- [Python-Keystoneclient](https://www.precursorintelligence.com/product/openstack/python-keystoneclient): 7 vulnerabilities, 21 versions
- [Tripleo Heat Templates](https://www.precursorintelligence.com/product/openstack/tripleo_heat_templates): 5 vulnerabilities, 139 versions
- [Barbican](https://www.precursorintelligence.com/product/openstack/barbican): 5 vulnerabilities, 56 versions
- [Icehouse](https://www.precursorintelligence.com/product/openstack/icehouse): 4 vulnerabilities, 2 versions
- [Trove](https://www.precursorintelligence.com/product/openstack/trove): 3 vulnerabilities, 12 versions
- [Keystonemiddleware](https://www.precursorintelligence.com/product/openstack/keystonemiddleware): 3 vulnerabilities, 66 versions
- [Diablo](https://www.precursorintelligence.com/product/openstack/diablo): 2 vulnerabilities, 1 version
- [Murano](https://www.precursorintelligence.com/product/openstack/murano): 2 vulnerabilities, 1 version
- [Oslo](https://www.precursorintelligence.com/product/openstack/oslo): 2 vulnerabilities, 2 versions
- [Tripleo Ansible](https://www.precursorintelligence.com/product/openstack/tripleo_ansible): 2 vulnerabilities, 23 versions
- [Manila](https://www.precursorintelligence.com/product/openstack/manila): 2 vulnerabilities, 41 versions
- [Cloud Magnum Orchestration](https://www.precursorintelligence.com/product/openstack/cloud_magnum_orchestration): 2 vulnerabilities, 1 version
- [Ceilometer](https://www.precursorintelligence.com/product/openstack/ceilometer): 2 vulnerabilities, 85 versions
- [Designate](https://www.precursorintelligence.com/product/openstack/designate): 2 vulnerabilities, 5 versions
- [Octavia](https://www.precursorintelligence.com/product/openstack/octavia): 2 vulnerabilities, 14 versions
- [Swauth](https://www.precursorintelligence.com/product/openstack/swauth): 1 vulnerability, 9 versions
- [Swift3](https://www.precursorintelligence.com/product/openstack/swift3): 1 vulnerability, 1 version
- Telemetry (ceilometer): 1 vulnerability, 4 versions
- [Blazar-Dashboard](https://www.precursorintelligence.com/product/openstack/blazar-dashboard): 1 vulnerability, 12 versions
- Compute (nova): 1 vulnerability, 1 version
- [Instack-Undercloud](https://www.precursorintelligence.com/product/openstack/instack-undercloud): 1 vulnerability, 3 versions
- [Ironic](https://www.precursorintelligence.com/product/openstack/ironic): 1 vulnerability, 2 versions
- [Ironic-Inspector](https://www.precursorintelligence.com/product/openstack/ironic-inspector): 1 vulnerability, 24 versions
- [Juno](https://www.precursorintelligence.com/product/openstack/juno): 1 vulnerability, 3 versions
- [Kilo](https://www.precursorintelligence.com/product/openstack/kilo): 1 vulnerability, 1 version
- [Magnum](https://www.precursorintelligence.com/product/openstack/magnum): 1 vulnerability, 34 versions
- [Mitaka-Murano](https://www.precursorintelligence.com/product/openstack/mitaka-murano): 1 vulnerability, 1 version
- [Murano-Dashboard](https://www.precursorintelligence.com/product/openstack/murano-dashboard): 1 vulnerability, 1 version
- [Nova-Lxd](https://www.precursorintelligence.com/product/openstack/nova-lxd): 1 vulnerability, 1 version
- [Openstack](https://www.precursorintelligence.com/product/openstack/openstack): 1 vulnerability, 1 version
- [Orchestration API](https://www.precursorintelligence.com/product/openstack/orchestration_api): 1 vulnerability, 4 versions
- [Oslo.middleware](https://www.precursorintelligence.com/product/openstack/oslo.middleware): 1 vulnerability, 73 versions
- [Oslo.utils](https://www.precursorintelligence.com/product/openstack/oslo.utils): 1 vulnerability, 118 versions
- [OS-Vif](https://www.precursorintelligence.com/product/openstack/os-vif): 1 vulnerability, 26 versions
- [Puppet-Swift](https://www.precursorintelligence.com/product/openstack/puppet-swift): 1 vulnerability, 60 versions
- [Puppet-Tripleo](https://www.precursorintelligence.com/product/openstack/puppet-tripleo): 1 vulnerability, 2 versions
- [Pycadf](https://www.precursorintelligence.com/product/openstack/pycadf): 1 vulnerability, 18 versions
- [Python Glanceclient](https://www.precursorintelligence.com/product/openstack/python_glanceclient): 1 vulnerability, 11 versions
- [Python-Muranoclient](https://www.precursorintelligence.com/product/openstack/python-muranoclient): 1 vulnerability, 1 version
- [Oslo-Incubator](https://www.precursorintelligence.com/product/openstack/oslo-incubator): 0 vulnerabilities, 5 versions
- [Vitrage](https://www.precursorintelligence.com/product/openstack/vitrage): 0 vulnerabilities, 60 versions
- [Glance Store](https://www.precursorintelligence.com/product/openstack/glance_store): 0 vulnerabilities, 81 versions

## Questions

### How many vulnerabilities does Openstack have?

Our catalogue lists 257 published vulnerabilities across 67 products and 1,890 versions from Openstack.

### Which Openstack vulnerabilities are being exploited?

None of Openstack's vulnerabilities is on the list of flaws known to be exploited today.

### Which Openstack product has the most vulnerabilities?

Keystone, with 38 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new Openstack vulnerabilities?

Create a Precursor Intelligence account and track the Openstack products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running Openstack?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact