Red Hat Red Hat OpenStack Platform 17.1
19 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-92982 | | Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection | HIGH 8.5 | 0.5 % | ||
| CVE-2026-92091 | | Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array | MEDIUM 5.9 | 0.6 % | ||
| CVE-2026-75092 | | Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-w… | HIGH 7.3 | 0.2 % | ||
| CVE-2026-84828 | | Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-87872 | | Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enab… | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-87874 | | Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning … | HIGH 8.1 | 0.7 % | ||
| CVE-2026-80158 | | Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa b… | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-11837 | | Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown | HIGH 7.3 | 0.2 % | ||
| CVE-2026-34956 | | Openvswitch: open vswitch: denial of service via malformed ftp epasv command | MEDIUM 5.9 | 0.4 % | ||
| CVE-2025-14010 | | Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-43168 | | Unbound: heap-buffer-overflow in unbound | MEDIUM 4.8 | 0.3 % | ||
| CVE-2024-43167 | | Unbound: null pointer dereference in unbound | LOW 2.8 | 0.4 % | ||
| CVE-2024-4437 | | Etcd: incomplete fix for cve-2021-44716 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2024-4436 | | Etcd: incomplete fix for cve-2022-41723 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2023-6725 | | Tripleo-ansible: bind keys are world readable | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-3637 | | Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) | MEDIUM 6.5 | 1.3 % | ||
| CVE-2013-0270 | | Keystone: openstack keystone: denial of service via large http request with long tenant name | MEDIUM 6.5 | 3.2 % | ||
| CVE-2013-0335 | | Openstack nova: vnc proxy can connect to the wrong vm | HIGH 7.6 | 2.1 % | ||
| CVE-2012-5571 | | Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling | MEDIUM 5.4 | 2.1 % |