- How many CVEs does OpenStack have?
- OpenStack has 347 published CVE records since 2011, including 70 in the last two years.
- How many OpenStack CVEs are in CISA KEV?
- None of OpenStack's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which OpenStack products have the most CVEs?
- The OpenStack products with the most published CVEs are Nova, Keystone, Neutron, Glance, folsom.
- What are the most common weakness types in OpenStack CVEs?
- OpenStack's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-264, CWE-863 (Incorrect Authorization), CWE-399.
- Are there public exploits for OpenStack vulnerabilities?
- Yes — 98 of OpenStack's CVEs have a known public exploit.
- How many critical OpenStack vulnerabilities are there?
- OpenStack has 23 critical and 112 high-severity CVEs.
- What is the average severity of OpenStack CVEs?
- The average CVSS base score across OpenStack's scored CVEs is 6.2.