Skip to content

Apache Cloudstack vulnerabilities

apache cloudstackA buffer overflow vulnerability has been found in the baremetal component of Apache CloudStack....CVE-2019-175629.8 CriticalMay 14, 2020
apache cloudstackApache CloudStack 4.1 to 4.8.1.0 and 4.9.0.0 contain an API call designed to allow a user to...CVE-2016-68139.8 CriticalFebruary 6, 2018
apache cloudstackIn Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as...CVE-2013-43174.3 MediumFebruary 6, 2018
apache cloudstackApache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x...CVE-2016-30856.5 MediumJune 10, 2016
apache cloudstackApache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM...CVE-2015-32529.8 CriticalFebruary 8, 2016
apache cloudstackApache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain...CVE-2015-32514.9 MediumFebruary 8, 2016
apache cloudstackApache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to obtain private...CVE-2014-95935.0 MediumJanuary 15, 2015
apache cloudstackApache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass...CVE-2014-78075.0 MediumDecember 10, 2014
apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x...CVE-2013-27585.0 MediumMay 23, 2014
apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x...CVE-2013-27565.0 MediumMay 23, 2014
apache cloudstackThe (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow...CVE-2014-00314.0 MediumJanuary 14, 2014
apache cloudstackThe virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in...CVE-2013-63982.8 LowJanuary 14, 2014
apache cloudstackMultiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow...CVE-2013-21364.3 MediumAugust 19, 2013
apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3...CVE-2012-56161.5 LowJanuary 22, 2013
apache cloudstackCitrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make...CVE-2012-450110.0 HighOctober 26, 2012