Skip to content

Eucalyptus Eucalyptus vulnerabilities

eucalyptus management consoleCross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0...CVE-2014-50399.6 CriticalJanuary 31, 2020
eucalyptus management consoleCross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0...CVE-2013-47706.1 MediumJanuary 27, 2020
eucalyptus, hewlett packard enterprise helion eucalyptus +1 moreA Remote Escalation of Privilege vulnerability in HPE Helion Eucalyptus version 3.3.0 through 4.3...CVE-2016-85288.8 HighFebruary 15, 2018
eucalyptus, hewlett packard enterprise helion eucalyptus +1 moreHPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for...CVE-2016-85208.8 HighFebruary 15, 2018
eucalyptusAtlassian Eucalyptus before 4.4.1, when in EDGE mode, allows remote authenticated users with...CVE-2017-79996.5 MediumJune 1, 2017
eucalyptusHPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended...CVE-2015-68617.5 HighJanuary 5, 2016
eucalyptusHP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote...CVE-2014-50406.8 MediumJanuary 5, 2016
eucalyptusThe cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns...CVE-2013-47694.3 MediumDecember 26, 2014
eucalyptusEucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system...CVE-2014-50382.1 LowNovember 7, 2014
eucalyptusEucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords...CVE-2014-50372.1 LowNovember 7, 2014
eucalyptusThe Storage Controller (SC) component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell...CVE-2014-50361.9 LowSeptember 5, 2014
eucalyptusThe web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of...CVE-2013-47685.0 MediumApril 15, 2014
eucalyptusUnspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors.CVE-2013-476710.0 HighOctober 10, 2013
eucalyptusEucalyptus Unauthorized Access to CC/NC Log FilesCVE-2013-4766Fix available4.3 MediumSeptember 17, 2013
eucalyptusWalrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus,...CVE-2013-22965.5 MediumSeptember 17, 2013
eucalyptusWalrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory,...CVE-2012-40674.3 MediumSeptember 17, 2013
eucalyptusThe internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require...CVE-2012-40665.0 MediumMarch 8, 2013
eucalyptusEucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services...CVE-2012-40653.5 LowOctober 1, 2012
eucalyptusEucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services...CVE-2012-40646.5 MediumOctober 1, 2012
eucalyptusThe Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying...CVE-2012-40635.0 MediumOctober 1, 2012
eucalyptusThe VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP...CVE-2012-32417.5 HighJuly 17, 2012
eucalyptusThe Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain...CVE-2012-32407.5 HighJuly 17, 2012
eucalyptus, canonical ubuntu linux +1 moreEucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC)...CVE-2011-07306.5 MediumJune 2, 2011
eucalyptusThe password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not...CVE-2010-39057.5 HighDecember 22, 2010