opennebula
Security Risk Profile
39
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 28, 2022 to present
8
Total CVEs
3
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
39/100
low
Severity Distribution
Critical
1High
2Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
4
2
Race Condition
1
3
Malicious File Upload
1
4
Command Injection
1
Most Affected Products
1. OpenNebula OpenNebula14
2. OpenNebula Community Edition1
3. OpenNebula Enterprise Edition1
Recent Vulnerabilities
See more →CVE-2025-56536
CVSS 6.1medium
4/29/2026🔧 No Patch
CVE-2025-56535
CVSS 6.1medium
4/29/2026🔧 No Patch
CVE-2025-56537
CVSS 6.1medium
4/29/2026🔧 No Patch
CVE-2025-56534
CVSS 6.1medium
4/29/2026🔧 No Patch
CVE-2025-54955
CVSS 8.1high
8/2/2025🔧 No Patch
CVE-2022-37426
CVSS 7.5high
10/28/2022
CVE-2022-37425
CVSS 9.9critical
The FILES directive inside a VM template allows execution of uploaded files when the template is instantiated, resulting in a Remote Code Execution (RCE) attack.
10/28/2022
CVE-2022-37424
CVSS 6.5medium
The FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure.
10/28/2022
Monitor opennebula in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.