Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:keystone_essex:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOpenstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a)
ProductKeystone Essex (0e274a29-bf32-5bd1-ada6-30d0c036ce2c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/openstackhelm/keystone purl2cpe 2026-06-01 10:17:03.545306
pkg:github/openstack/keystone purl2cpe 2026-06-01 10:17:03.545309
pkg:maven/org.apache.jclouds.api/openstack-keystone purl2cpe 2026-06-01 10:17:03.545311
pkg:pypi/keystone purl2cpe 2026-06-01 10:17:03.545314
pkg:rpm/opensuse/openstack-keystone purl2cpe 2026-06-01 10:17:03.545317

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1665 vulnerable 2026-06-03 14:32:50.738702 Details available
The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.
Published: 2013-04-03T00:00:00.000Z
Updated: 2024-08-06T15:13:31.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1664 vulnerable 2026-06-03 14:32:50.738138 Details available
The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.
Published: 2013-04-03T00:00:00.000Z
Updated: 2024-08-06T15:13:32.247Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.