| CVE-2026-90460 |
An issue was discovered in OpenStack Keystone before 29.0.3
|
7.6
Élevée
|
11 sept. 2026 |
| CVE-2026-80183 |
In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every…
|
7.1
Élevée
|
26 août 2026 |
| CVE-2026-80184 |
In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens,…
|
7.6
Élevée
|
25 août 2026 |
| CVE-2026-80182 |
In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped…
|
7.6
Élevée
|
25 août 2026 |
| CVE-2026-42998 |
An issue was discovered in OpenStack Keystone before 29.0.2
|
6.0
Moyenne
|
28 mai 2026 |
| CVE-2026-42999 |
An issue was discovered in OpenStack Keystone before 29.0.2
|
6.0
Moyenne
|
28 mai 2026 |
| CVE-2026-43000 |
An issue was discovered in OpenStack Keystone before 29.0.2
|
6.0
Moyenne
|
28 mai 2026 |
| CVE-2026-44394 |
An issue was discovered in OpenStack Keystone before 29.0.2
|
6.0
Moyenne
|
28 mai 2026 |
| CVE-2026-43001 |
An issue was discovered in OpenStack Keystone before 29.0.2
|
7.9
Élevée
|
1 mai 2026 |
| CVE-2026-40683 |
In OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a…
|
7.7
Élevée
|
14 avr. 2026 |
| CVE-2026-33551 |
An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0
|
3.5
Faible
|
10 avr. 2026 |
| CVE-2025-65073 |
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS…
|
7.5
Élevée
|
17 nov. 2025 |
| CVE-2013-2255 |
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail…
|
Non notée
|
1 nov. 2019 |