CVE security advisories and vulnerability history for OpenStack.
OpenStack has 333 published CVE records since 2011, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 19 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.
This page aggregates every publicly disclosed vulnerability (CVE) affecting OpenStack products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
A quick read on OpenStack's vulnerability posture, as a share of its 333 published CVEs.
across 333 scored CVEs
125 of 333 scored
0 of 333 CVEs
19 of 333 CVEs
313 of 333 CVEs
How the CVSS severity of OpenStack's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of OpenStack's CVEs are currently listed in CISA's KEV catalog.
Public exploits
19
19 of OpenStack's CVEs have a known public exploit available.
The OpenStack products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in OpenStack CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish OpenStack CVE records.
How many OpenStack CVEs were published each year.
The most recently disclosed vulnerabilities affecting OpenStack.
Track new OpenStack CVEs as they are disclosed and get AI-written analysis and remediation guidance.
Monitor OpenStack CVEsBrowse vulnerabilities for other tracked vendors.
Common questions about OpenStack vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new OpenStack vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
