cinder has 7 CVEs on record between 2022 and 2024. The median CVSS is 6.5 (medium). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- cinder 7
7
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2015-5162High· 7.5OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption42CVE-2024-32498Medium· 6.5OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access36CVE-2020-10755Medium· 6.5Openstack cinder Improper handling of ScaleIO backend credentials36CVE-2022-47951Medium· 5.7OpenStack Cinder, glance, and Nova vulnerable to Path Traversal32CVE-2015-1851MediumOpenStack Cinder file disclosure in image convert28
cinder vulnerabilities
CVEs affecting cinder, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2024-32498Medium· 6.5OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
▾ Sunlitcinder · cinderEPSS 0.83%via OSV
CVE-2022-47951Medium· 5.7OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
▾ Sunlitcinder · cinderEPSS 1.0%via OSV
CVE-2020-10755Medium· 6.5Openstack cinder Improper handling of ScaleIO backend credentials
Openstack cinder Improper handling of ScaleIO backend credentials
▾ Sunlitcinder · cinderEPSS 1.2%via OSV
CVE-2014-3641MediumOpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability
OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability
▾ Sunlitcinder · cinderEPSS 1.9%via OSV
CVE-2015-1851MediumOpenStack Cinder file disclosure in image convert
OpenStack Cinder file disclosure in image convert
▾ Sunlitcinder · cinderEPSS 2.6%via OSV
CVE-2013-4202MediumOpenStack Cinder Denial of Service using XML entities
OpenStack Cinder Denial of Service using XML entities
▾ Sunlitcinder · cinderEPSS 2.6%via OSV
CVE-2015-5162High· 7.5OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
▾ Twilightcinder · cinderEPSS 2.9%via OSV