[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPKEsT3b8Tzk_Fbefg1a-BhAgT4x4xEbu3Md5EHvr40c":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":304,"kevVulnerabilities":363,"topProductsByCves":364,"seoMetadata":375,"meta":384},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":303},23097,"openstack",67,257,0,1890,"2024-08-02","o",[16,22,27,33,39,45,51,56,62,66,71,76,80,84,88,93,99,103,108,113,118,122,126,130,134,139,144,148,153,157,161,165,169,172,176,179,183,186,190,193,196,200,204,208,212,217,221,224,227,231,236,240,243,247,250,254,259,264,268,272,277,281,285,289,292,296,299],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},123272,"keystone",86,38,"2022-09-01",{"id":23,"product_name":24,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":26},123283,"nova",161,"2024-07-24",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},123257,"folsom",9,26,"2014-02-06",{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":11,"last_cve_update":38},123282,"neutron",154,25,"2023-03-06",{"id":40,"product_name":41,"version_count":42,"cve_count":43,"kev_count":11,"last_cve_update":44},123264,"horizon",87,22,"2023-08-22",{"id":46,"product_name":47,"version_count":48,"cve_count":49,"kev_count":11,"last_cve_update":50},123256,"essex",1,16,"2013-03-22",{"id":52,"product_name":53,"version_count":37,"cve_count":54,"kev_count":11,"last_cve_update":55},123266,"image_registry_and_delivery_service_\\(glance\\)",15,"2016-04-13",{"id":57,"product_name":58,"version_count":59,"cve_count":60,"kev_count":11,"last_cve_update":61},123301,"swift",56,14,"2023-01-18",{"id":63,"product_name":64,"version_count":65,"cve_count":60,"kev_count":11,"last_cve_update":32},123261,"grizzly",6,{"id":67,"product_name":68,"version_count":31,"cve_count":69,"kev_count":11,"last_cve_update":70},123249,"compute",12,"2019-11-01",{"id":72,"product_name":73,"version_count":19,"cve_count":74,"kev_count":11,"last_cve_update":75},123258,"glance",11,"2024-07-05",{"id":77,"product_name":78,"version_count":79,"cve_count":74,"kev_count":11,"last_cve_update":32},123262,"havana",4,{"id":81,"product_name":82,"version_count":83,"cve_count":30,"kev_count":11,"last_cve_update":75},123246,"cinder",151,{"id":85,"product_name":86,"version_count":69,"cve_count":87,"kev_count":11,"last_cve_update":13},123263,"heat",7,{"id":89,"product_name":90,"version_count":91,"cve_count":87,"kev_count":11,"last_cve_update":92},123298,"python-keystoneclient",21,"2019-12-10",{"id":94,"product_name":95,"version_count":96,"cve_count":97,"kev_count":11,"last_cve_update":98},123306,"tripleo_heat_templates",139,5,"2022-08-26",{"id":100,"product_name":101,"version_count":59,"cve_count":97,"kev_count":11,"last_cve_update":102},123243,"barbican","2023-09-24",{"id":104,"product_name":105,"version_count":106,"cve_count":79,"kev_count":11,"last_cve_update":107},123265,"icehouse",2,"2015-06-25",{"id":109,"product_name":110,"version_count":69,"cve_count":111,"kev_count":11,"last_cve_update":112},123307,"trove",3,"2017-08-11",{"id":114,"product_name":115,"version_count":116,"cve_count":111,"kev_count":11,"last_cve_update":117},123274,"keystonemiddleware",66,"2016-02-03",{"id":119,"product_name":120,"version_count":48,"cve_count":106,"kev_count":11,"last_cve_update":121},123255,"diablo","2012-07-22",{"id":123,"product_name":124,"version_count":11,"cve_count":106,"kev_count":11,"last_cve_update":125},123273,"keystone_essex","2013-04-03",{"id":127,"product_name":128,"version_count":48,"cve_count":106,"kev_count":11,"last_cve_update":129},123280,"murano","2024-03-18",{"id":131,"product_name":132,"version_count":106,"cve_count":106,"kev_count":11,"last_cve_update":133},123288,"oslo","2014-08-19",{"id":135,"product_name":136,"version_count":137,"cve_count":106,"kev_count":11,"last_cve_update":138},123304,"tripleo_ansible",23,"2023-03-23",{"id":140,"product_name":141,"version_count":142,"cve_count":106,"kev_count":11,"last_cve_update":143},123278,"manila",41,"2020-03-12",{"id":145,"product_name":146,"version_count":48,"cve_count":106,"kev_count":11,"last_cve_update":147},123248,"cloud_magnum_orchestration","2018-01-03",{"id":149,"product_name":150,"version_count":151,"cve_count":106,"kev_count":11,"last_cve_update":152},123245,"ceilometer",85,"2019-03-26",{"id":154,"product_name":155,"version_count":97,"cve_count":106,"kev_count":11,"last_cve_update":156},123253,"designate","2019-11-22",{"id":158,"product_name":159,"version_count":60,"cve_count":106,"kev_count":11,"last_cve_update":160},123285,"octavia","2019-06-03",{"id":162,"product_name":163,"version_count":30,"cve_count":48,"kev_count":11,"last_cve_update":164},123300,"swauth","2017-11-21",{"id":166,"product_name":167,"version_count":48,"cve_count":48,"kev_count":11,"last_cve_update":168},123302,"swift3","2016-01-13",{"id":170,"product_name":171,"version_count":79,"cve_count":48,"kev_count":11,"last_cve_update":133},123303,"telemetry_\\(ceilometer\\)",{"id":173,"product_name":174,"version_count":11,"cve_count":48,"kev_count":11,"last_cve_update":175},123305,"tripleo-common","2018-08-22",{"id":177,"product_name":178,"version_count":11,"cve_count":48,"kev_count":11,"last_cve_update":129},123309,"yaql",{"id":180,"product_name":181,"version_count":69,"cve_count":48,"kev_count":11,"last_cve_update":182},123244,"blazar-dashboard","2020-10-16",{"id":184,"product_name":185,"version_count":11,"cve_count":48,"kev_count":11,"last_cve_update":125},123247,"cinder_folsom",{"id":187,"product_name":188,"version_count":48,"cve_count":48,"kev_count":11,"last_cve_update":189},123250,"compute_\\(nova\\)","2016-09-27",{"id":191,"product_name":192,"version_count":11,"cve_count":48,"kev_count":11,"last_cve_update":125},123251,"compute_\\(nova\\)_essex",{"id":194,"product_name":195,"version_count":11,"cve_count":48,"kev_count":11,"last_cve_update":125},123252,"compute_\\(nova\\)_folsom",{"id":197,"product_name":198,"version_count":11,"cve_count":48,"kev_count":11,"last_cve_update":199},123254,"devstack","2013-05-21",{"id":201,"product_name":202,"version_count":11,"cve_count":48,"kev_count":11,"last_cve_update":203},123259,"glance-store","2024-02-01",{"id":205,"product_name":206,"version_count":111,"cve_count":48,"kev_count":11,"last_cve_update":207},123267,"instack-undercloud","2017-09-21",{"id":209,"product_name":210,"version_count":106,"cve_count":48,"kev_count":11,"last_cve_update":211},123268,"ironic","2017-06-07",{"id":213,"product_name":214,"version_count":215,"cve_count":48,"kev_count":11,"last_cve_update":216},123269,"ironic-inspector",24,"2019-07-30",{"id":218,"product_name":219,"version_count":11,"cve_count":48,"kev_count":11,"last_cve_update":220},123270,"ironic_inspector","2015-11-25",{"id":222,"product_name":223,"version_count":111,"cve_count":48,"kev_count":11,"last_cve_update":107},123271,"juno",{"id":225,"product_name":226,"version_count":48,"cve_count":48,"kev_count":11,"last_cve_update":107},123275,"kilo",{"id":228,"product_name":229,"version_count":11,"cve_count":48,"kev_count":11,"last_cve_update":230},123276,"kolla","2022-12-21",{"id":232,"product_name":233,"version_count":234,"cve_count":48,"kev_count":11,"last_cve_update":235},123277,"magnum",34,"2019-06-21",{"id":237,"product_name":238,"version_count":48,"cve_count":48,"kev_count":11,"last_cve_update":239},123279,"mitaka-murano","2016-09-26",{"id":241,"product_name":242,"version_count":48,"cve_count":48,"kev_count":11,"last_cve_update":239},123281,"murano-dashboard",{"id":244,"product_name":245,"version_count":48,"cve_count":48,"kev_count":11,"last_cve_update":246},123284,"nova-lxd","2017-04-12",{"id":248,"product_name":8,"version_count":48,"cve_count":48,"kev_count":11,"last_cve_update":249},123286,"2017-08-18",{"id":251,"product_name":252,"version_count":79,"cve_count":48,"kev_count":11,"last_cve_update":253},123287,"orchestration_api","2016-01-20",{"id":255,"product_name":256,"version_count":257,"cve_count":48,"kev_count":11,"last_cve_update":258},123290,"oslo.middleware",73,"2018-05-08",{"id":260,"product_name":261,"version_count":262,"cve_count":48,"kev_count":11,"last_cve_update":263},123291,"oslo.utils",118,"2022-08-29",{"id":265,"product_name":266,"version_count":31,"cve_count":48,"kev_count":11,"last_cve_update":267},123292,"os-vif","2019-08-28",{"id":269,"product_name":270,"version_count":11,"cve_count":48,"kev_count":11,"last_cve_update":271},123293,"puppet-gerrit","2017-01-12",{"id":273,"product_name":274,"version_count":275,"cve_count":48,"kev_count":11,"last_cve_update":276},123294,"puppet-swift",60,"2018-04-26",{"id":278,"product_name":279,"version_count":106,"cve_count":48,"kev_count":11,"last_cve_update":280},123295,"puppet-tripleo","2018-04-24",{"id":282,"product_name":283,"version_count":284,"cve_count":48,"kev_count":11,"last_cve_update":133},123296,"pycadf",18,{"id":286,"product_name":287,"version_count":74,"cve_count":48,"kev_count":11,"last_cve_update":288},123297,"python_glanceclient","2013-08-28",{"id":290,"product_name":291,"version_count":48,"cve_count":48,"kev_count":11,"last_cve_update":239},123299,"python-muranoclient",{"id":293,"product_name":294,"version_count":97,"cve_count":11,"kev_count":11,"last_cve_update":295},123289,"oslo-incubator",null,{"id":297,"product_name":298,"version_count":275,"cve_count":11,"kev_count":11,"last_cve_update":295},123308,"vitrage",{"id":300,"product_name":301,"version_count":302,"cve_count":11,"kev_count":11,"last_cve_update":295},123260,"glance_store",81,"Openstack is a technology vendor with 67 tracked products and 257 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[305,313,320,326,331,336,343,347,351,357],{"cveId":306,"description":307,"publishedDate":147,"cvssScore":308,"cvssVersion":309,"severity":310,"isKev":311,"epssScore":312},"CVE-2017-18017","The tcpmss_mangle_packet function in net\u002Fnetfilter\u002Fxt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.",9.8,"v3.1","Critical",false,0.52841,{"cveId":314,"description":315,"publishedDate":316,"cvssScore":317,"cvssVersion":309,"severity":318,"isKev":311,"epssScore":319},"CVE-2021-3654","A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.","2022-03-02",6.1,"Medium",0.26792,{"cveId":321,"description":322,"publishedDate":323,"cvssScore":79,"cvssVersion":324,"severity":318,"isKev":311,"epssScore":325},"CVE-2015-3221","OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.","2015-08-26","v2",0.11434,{"cveId":327,"description":328,"publishedDate":164,"cvssScore":308,"cvssVersion":329,"severity":310,"isKev":311,"epssScore":330},"CVE-2017-16613","An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving (unhashed) tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allows attackers to bypass authentication by inserting a token into an X-Auth-Token header of a new request. NOTE: github.com\u002Fopenstack\u002Fswauth URLs do not mean that Swauth is maintained by an official OpenStack project team.","v3.0",0.08422,{"cveId":332,"description":333,"publishedDate":334,"cvssScore":308,"cvssVersion":309,"severity":310,"isKev":311,"epssScore":335},"CVE-2012-4406","OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.","2012-10-22",0.06571,{"cveId":337,"description":338,"publishedDate":339,"cvssScore":340,"cvssVersion":309,"severity":341,"isKev":311,"epssScore":342},"CVE-2020-12691","An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any authenticated user can create an EC2 credential for themselves for a project that they have a specified role on, and then perform an update to the credential user and project, allowing them to masquerade as another user. This potentially allows a malicious user to act as the admin on a project another user has the admin role on, which can effectively grant that user global admin privileges.","2020-05-07",8.8,"High",0.04918,{"cveId":344,"description":345,"publishedDate":125,"cvssScore":97,"cvssVersion":324,"severity":318,"isKev":311,"epssScore":346},"CVE-2013-1664","The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.",0.04771,{"cveId":348,"description":349,"publishedDate":125,"cvssScore":97,"cvssVersion":324,"severity":318,"isKev":311,"epssScore":350},"CVE-2013-1665","The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.",0.04507,{"cveId":352,"description":353,"publishedDate":354,"cvssScore":355,"cvssVersion":329,"severity":310,"isKev":311,"epssScore":356},"CVE-2015-8914","The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.","2016-06-17",9.1,0.04283,{"cveId":358,"description":359,"publishedDate":360,"cvssScore":361,"cvssVersion":324,"severity":341,"isKev":311,"epssScore":362},"CVE-2012-4456","The (1) OS-KSADM\u002Fservices and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-2 do not properly validate X-Auth-Token, which allow remote attackers to read the roles for an arbitrary user or get, create, or delete arbitrary services.","2012-10-09",7.5,0.03998,[],[365,366,367,368,369,370,371,372,373,374],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":11,"last_cve_update":38},{"id":40,"product_name":41,"version_count":42,"cve_count":43,"kev_count":11,"last_cve_update":44},{"id":46,"product_name":47,"version_count":48,"cve_count":49,"kev_count":11,"last_cve_update":50},{"id":52,"product_name":53,"version_count":37,"cve_count":54,"kev_count":11,"last_cve_update":55},{"id":57,"product_name":58,"version_count":59,"cve_count":60,"kev_count":11,"last_cve_update":61},{"id":63,"product_name":64,"version_count":65,"cve_count":60,"kev_count":11,"last_cve_update":32},{"id":67,"product_name":68,"version_count":31,"cve_count":69,"kev_count":11,"last_cve_update":70},{"title":376,"metaDescription":377,"keywords":378,"structuredData":379},"Openstack - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openstack covering 67 products with 257 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Openstack vulnerabilities, Openstack security, Openstack CVE, Openstack threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":380,"@type":381,"name":382,"description":377,"url":383},"https:\u002F\u002Fschema.org","Organization","Openstack","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fopenstack",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":385,"apiVersion":386},"2026-10-17T19:29:27.327Z","3.0"]