Folsom
Vendor:
First CVE: Jul 17, 2012 · Active for 14 years
26
Total CVEs
More Total CVEs than 95% of tracked products
8.7
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
4.8
Avg CVSS
Higher Avg CVSS than 6% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Folsom over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 17, 2012
14 years ago
Most Recent CVE
Feb 6, 2014
4,551 days ago
CVE Severity & Scoring
Folsom26 CVEs
27%
65%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local2 (7.7%)
Network1 (3.8%)
Unknown23 (88.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (11.5%)
High0 (0.0%)
Unknown23 (88.5%)
User Interaction
None3 (11.5%)
Unknown23 (88.5%)
Required0 (0.0%)
Privileges Required
Low3 (11.5%)
High0 (0.0%)
None0 (0.0%)
Unknown23 (88.5%)
Top CVEs
Signals from CVEs in this product scope (26 CVEs).
26 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-0261HIGH A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directory. This vulnerability allows the local | Mar 8, 2013 | 8.8 | 27 | NO | NO |
CVE-2013-2161HIGH XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name. | Aug 20, 2013 | 7.5 | 22 | NO | NO |
CVE-2013-0335MEDIUM OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token | Mar 22, 2013 | 6.0 | 22 | NO | NO |
CVE-2013-0208MEDIUM The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume | Feb 13, 2013 | 6.5 | 22 | NO | NO |
CVE-2012-4573MEDIUM The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request | Nov 11, 2012 | 5.5 | 22 | NO | NO |
CVE-2012-3360MEDIUM Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authen | Jul 22, 2012 | 5.5 | 22 | NO | NO |
CVE-2013-1665MEDIUM The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read ar | Apr 3, 2013 | 5.0 | 21 | NO | NO |
CVE-2012-5571MEDIUM A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone d | Dec 18, 2012 | 5.4 | 21 | NO | NO |
CVE-2012-3361MEDIUM virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attac | Jul 22, 2012 | 5.5 | 21 | NO | NO |
CVE-2012-5482MEDIUM The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request | Nov 11, 2012 | 5.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (26 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (26 CVEs).
Media Mentions
Signals from CVEs in this product scope (26 CVEs).
Top CNAs Publishing CVEs For Folsom
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2012.2 | 11 | 5.1 | 2.5% | 0 | 0 |