Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:neutron:2013.1.5:*:*:*:*:*:*:*

part: a version: 2013.1.5 update: *

VendorOpenstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a)
ProductNeutron (a2b4d295-6d29-5e8f-898a-a53ccda2d10f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/openstackhelm/neutron purl2cpe 2026-06-01 10:17:03.564271
pkg:github/openstack/neutron purl2cpe 2026-06-01 10:17:03.564273
pkg:maven/org.apache.jclouds.api/openstack-neutron purl2cpe 2026-06-01 10:17:03.564274
pkg:pypi/neutron purl2cpe 2026-06-01 10:17:03.564276
pkg:rpm/opensuse/openstack-neutron purl2cpe 2026-06-01 10:17:03.564277

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0187 vulnerable 2026-06-03 14:33:37.454476 Details available
The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.
Published: 2014-04-28T14:00:00.000Z
Updated: 2024-08-06T09:05:39.254Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0056 vulnerable 2026-06-03 14:33:36.440875 Details available
The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.
Published: 2014-05-08T14:00:00.000Z
Updated: 2024-08-06T09:05:37.915Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.