Essex
Vendor:
First CVE: Jan 13, 2012 · Active for 14 years
16
Total CVEs
More Total CVEs than 92% of tracked products
8.0
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
5.2
Avg CVSS
Higher Avg CVSS than 9% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Essex over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 13, 2012
14 years ago
Most Recent CVE
Mar 22, 2013
4,872 days ago
CVE Severity & Scoring
Essex16 CVEs
13%
81%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local2 (12.5%)
Network1 (6.3%)
Unknown13 (81.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (18.8%)
High0 (0.0%)
Unknown13 (81.3%)
User Interaction
None3 (18.8%)
Unknown13 (81.3%)
Required0 (0.0%)
Privileges Required
Low3 (18.8%)
High0 (0.0%)
None0 (0.0%)
Unknown13 (81.3%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-0261HIGH A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directory. This vulnerability allows the local | Mar 8, 2013 | 8.8 | 27 | NO | NO |
CVE-2013-0335MEDIUM OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token | Mar 22, 2013 | 6.0 | 22 | NO | NO |
CVE-2013-0208MEDIUM The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume | Feb 13, 2013 | 6.5 | 22 | NO | NO |
CVE-2012-4573MEDIUM The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request | Nov 11, 2012 | 5.5 | 22 | NO | NO |
CVE-2012-3360MEDIUM Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authen | Jul 22, 2012 | 5.5 | 22 | NO | NO |
CVE-2012-5571MEDIUM A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone d | Dec 18, 2012 | 5.4 | 21 | NO | NO |
CVE-2012-3361MEDIUM virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attac | Jul 22, 2012 | 5.5 | 21 | NO | NO |
CVE-2012-5482MEDIUM The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request | Nov 11, 2012 | 5.5 | 20 | NO | NO |
CVE-2013-0266MEDIUM A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerability is due to incorrect file permissions, specifically world-readable permissions, on the ` | Mar 8, 2013 | 5.5 | 19 | NO | NO |
CVE-2012-3426MEDIUM OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated | Jul 31, 2012 | 4.9 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Essex
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2012.1 | 10 | 5.0 | 2.5% | 0 | 0 |