Red Hat OpenStack Platform 13.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:openstack_platform:13.0:*:*:*:*:*:*:*
part: a version: 13.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Openstack Platform (95bf8034-38d8-547c-aebb-d1fa50a4e6e7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/fog/fog-openstack |
purl2cpe | 2026-06-01 10:12:55.260777 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-7319 |
vulnerable | 2026-06-08 06:58:21.879795 |
Openstack-heat: incomplete fix for cve-2023-1625
MEDIUM (5)
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
Published: 2024-08-02T20:36:24.314Z
Updated: 2025-11-20T20:56:47.430Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3637 |
vulnerable | 2026-06-08 06:09:40.066799 |
Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)
MEDIUM (4.3)
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.
Published: 2023-07-25T12:47:31.531Z
Updated: 2025-11-20T17:39:47.319Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3354 |
vulnerable | 2026-06-08 06:09:39.362876 |
Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service
HIGH (7.5)
A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.
Published: 2023-07-11T16:16:56.294Z
Updated: 2025-02-13T16:55:08.379Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1932 |
vulnerable | 2026-06-08 05:52:37.236306 |
Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss
MEDIUM (6.1)
A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.
Published: 2024-11-07T10:00:51.745Z
Updated: 2024-11-07T14:09:26.936Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1625 |
vulnerable | 2026-06-08 05:52:36.418251 |
Information leak in api
HIGH (7.4)
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
Published: 2023-09-24T00:08:12.738Z
Updated: 2024-09-24T14:59:25.505Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1108 |
vulnerable | 2026-06-08 05:52:33.883612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3596 |
vulnerable | 2026-06-08 05:48:21.494142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3277 |
vulnerable | 2026-06-08 05:47:20.132400 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3100 |
vulnerable | 2026-06-08 05:47:19.447947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2132 |
vulnerable | 2026-06-08 05:42:50.334055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23451 |
vulnerable | 2026-06-08 05:40:57.552979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0866 |
vulnerable | 2026-06-08 05:39:11.381684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3979 |
vulnerable | 2026-06-08 05:33:58.362438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3563 |
vulnerable | 2026-06-08 05:33:52.799550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20267 |
vulnerable | 2026-06-08 05:29:08.856590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20257 |
vulnerable | 2026-06-08 05:29:08.829288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27781 |
vulnerable | 2026-06-08 05:23:53.176722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25743 |
vulnerable | 2026-06-08 05:23:49.309745 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25658 |
vulnerable | 2026-06-08 05:22:37.110026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14394 |
vulnerable | 2026-06-08 05:19:23.236883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14365 |
vulnerable | 2026-06-08 05:19:23.137618 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.