Red Hat Red Hat OpenStack Platform 16.2
26 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-92982 | | Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection | HIGH 8.5 | 0.5 % | ||
| CVE-2026-92091 | | Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array | MEDIUM 5.9 | 0.6 % | ||
| CVE-2026-84828 | | Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-84185 | | Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification | MEDIUM 5.9 | 0.1 % | ||
| CVE-2026-80179 | | Jwcrypto: jwcrypto: denial of service via malformed jwe tokens | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-34956 | | Openvswitch: open vswitch: denial of service via malformed ftp epasv command | MEDIUM 5.9 | 0.4 % | ||
| CVE-2023-6110 | | Openstack: deleting a non existing access rule deletes another existing access rule in it's scope | MEDIUM 5.5 | 0.5 % | ||
| CVE-2024-8007 | | Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors | HIGH 8.1 | 0.4 % | ||
| CVE-2024-43168 | | Unbound: heap-buffer-overflow in unbound | MEDIUM 4.8 | 0.3 % | ||
| CVE-2024-43167 | | Unbound: null pointer dereference in unbound | LOW 2.8 | 0.4 % | ||
| CVE-2024-7319 | | Openstack-heat: incomplete fix for cve-2023-1625 | MEDIUM 5.0 | 0.4 % | ||
| CVE-2024-4840 | | Rhosp-director: cleartext passwords exposed in logs | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-4438 | fixed in 0:3.3.23-16.el8ost | Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2024-4437 | fixed in 0:3.3.23-16.el8ost | Etcd: incomplete fix for cve-2021-44716 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2024-4436 | fixed in 0:3.3.23-16.el8ost | Etcd: incomplete fix for cve-2022-41723 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2023-6725 | | Tripleo-ansible: bind keys are world readable | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-1141 | | Glance-store: glance store access key logged in debug log level | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-5366 | | Openvswitch don't match packets on nd_target field | HIGH 7.1 | 0.4 % | ||
| CVE-2023-1633 | | Insecure barbican configuration file leaking credential | MEDIUM 6.6 | 0.2 % | ||
| CVE-2023-1636 | | Incomplete container isolation | MEDIUM 6.0 | 0.5 % | ||
| CVE-2023-1625 | | Information leak in api | HIGH 7.4 | 0.7 % | ||
| CVE-2022-3261 | | Plain-text passwords saved in /var/log/messages | HIGH 7.5 | 0.3 % | ||
| CVE-2023-3637 | fixed in 1:15.3.5-2.20230216175503.el8ost | Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) | MEDIUM 6.5 | 1.3 % | ||
| CVE-2013-0270 | | Keystone: openstack keystone: denial of service via large http request with long tenant name | MEDIUM 6.5 | 3.2 % | ||
| CVE-2013-0335 | | Openstack nova: vnc proxy can connect to the wrong vm | HIGH 7.6 | 2.1 % | ||
| CVE-2012-5571 | | Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling | MEDIUM 5.4 | 2.1 % |