Fusionsphere Openstack (Huawei) - vulnerabilities (CVEs)

19 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2020-08-11. Vendor: Huawei.

CVEs of Fusionsphere Openstack

• CVE-2020-9079 - CVSS 8.8 (high), 2020-08-11: FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product incorrectly uses a protection mechanism. An attacker has to find a…
• CVE-2020-9225 - CVSS 7.8 (high), 2020-06-18: FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability. The software does not correctly perform a privilege assignment when an…
• CVE-2018-7977 - CVSS 7.5 (high), 2018-11-27: There is an information leakage vulnerability on several Huawei products. Due to insufficient communication protection for specific services, a remote,…
• CVE-2017-15321 - CVSS 3.7 (low), 2017-12-22: Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default.…
• CVE-2017-8188 - CVSS 7.2 (high), 2017-11-22: FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject…
• CVE-2017-8191 - CVSS 5.9 (medium), 2017-11-22: FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. Attackers may exploit the vulnerability to crack the cipher…
• CVE-2017-8194 - CVSS 8.8 (high), 2017-11-22: The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated,…
• CVE-2017-8190 - CVSS 6.7 (medium), 2017-11-22: FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the…
• CVE-2017-8193 - CVSS 8 (high), 2017-11-22: The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an…
• CVE-2017-8189 - CVSS 6 (medium), 2017-11-22: FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may…
• CVE-2017-8192 - CVSS 7.8 (high), 2017-11-22: FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this…
• CVE-2017-8195 - CVSS 8.8 (high), 2017-11-22: The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated,…
• CVE-2017-8168 - CVSS 4.3 (medium), 2017-11-22: FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability. Due to an incorrect configuration item,…
• CVE-2017-8134 - CVSS 8.8 (high), 2017-11-22: The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four…
• CVE-2017-8132 - CVSS 8.8 (high), 2017-11-22: The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four…
• CVE-2017-8131 - CVSS 8.8 (high), 2017-11-22: The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four…
• CVE-2017-8135 - CVSS 8.8 (high), 2017-11-22: The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four…
• CVE-2017-2720 - CVSS 5.3 (medium), 2017-11-22: FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between…
• CVE-2017-2719 - CVSS 8.8 (high), 2017-11-22: FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one…
• CVE-2017-2718 - CVSS 8.8 (high), 2017-11-22: FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one…
• CVE-2017-2714 - CVSS 8 (high), 2017-11-22: The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can…