CL
Product
Cloudstack
65
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 12High 25Medium 18Low 1
Watch
Add Cloudstack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-50386 | 9.9 | Nov 12 | Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure Affected: 4.0.0 before 4.18.2.5; 4.19.0.0 before 4.19.1.3 |
| CVE-2024-39864 | 9.8 | Jul 5 | The CloudStack integration API service allows running its unauthenticated API server (usually on port 8096 when configured and enabled via integration.api.port global setting) for… Affected: 4.0.0 before 4.18.2.1; 4.19.0.0 before 4.19.0.2 |
| CVE-2024-38346 | 9.8 | Jul 5 | The CloudStack cluster service runs on unauthenticated port (default 9090) that can be misused to run arbitrary commands on targeted hypervisors and CloudStack management server… Affected: 4.0.0 before 4.18.2.1; 4.19.0.0 before 4.19.0.2 |
| CVE-2024-29006 | 9.8 | Apr 4 | By default the CloudStack management server honours the x-forwarded-for HTTP header and logs it as the source IP of an API request Affected: 4.11.0.0 before 4.18.1.1; 4.19.0.0 |
| CVE-2022-35741 | 9.8 | Jul 18 | Apache CloudStack version 4.5.0 and later has a SAML 2.0 authentication Service Provider plugin which is found to be vulnerable to XML external entity (XXE) injection Affected: 4.5.0 before 4.16.1.1; 4.17.0.0 |
| CVE-2019-17562 | 9.8 | May 14 | A buffer overflow vulnerability has been found in the baremetal component of Apache CloudStack Affected: before 4.13.1.0 |
| CVE-2016-6813 | 9.8 | Feb 6 | Apache CloudStack 4.1 to 4.8.1.0 and 4.9.0.0 contain an API call designed to allow a user to register for the developer API Affected: 4.1.0 through 4.8.1.0; 4.9.0 |
| CVE-2015-3252 | 9.8 | Feb 8 | Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by connecting to the VNC… Affected: through 4.5.1 |
| CVE-2026-59085 | 9.1 | Aug 21 | Apache CloudStack: Server-Side Request Forgery (SSRF) vulnerability in webhook module Affected: 4.20.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-61398 | 9.1 | Aug 21 | Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI Affected: 4.15.1.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-62440 | 9.1 | Aug 21 | Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulation Affected: 4.21.0.0 before 4.22.1.1 |
| CVE-2026-25199 | 9.1 | May 8 | Apache CloudStack: Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access Affected: 4.21.0.0 before 4.22.0.1 |
| CVE-2026-47359 | 8.8 | Aug 21 | Apache CloudStack: OS Command Injection due to unsanitized mount command Affected: 4.20.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-50112 | 8.8 | Aug 21 | Apache CloudStack: RCE and SSRF in direct download, metalink and NFS templates Affected: 4.14.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-59799 | 8.8 | Aug 21 | Apache CloudStack: Missing Privilege Check in Two-Factor Authentication Disable Flow Affected: 4.18.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-61400 | 8.8 | Aug 21 | Apache CloudStack: Get and Run Diagnostics Command Injection Affected: 4.20.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-25077 | 8.8 | May 8 | Apache CloudStack: Unauthenticated Command Injection in Direct Download Templates Affected: 4.11.0.0 before 4.20.3.0; 4.21.0.0 before 4.22.0.1 |
| CVE-2025-47849 | 8.8 | Jun 10 | Apache CloudStack: Insecure access of user's API/Secret Keys in the same domain Affected: 4.10.0.0 before 4.19.3.0; 4.20.0.0 before 4.20.1.0 |
| CVE-2025-47713 | 8.8 | Jun 10 | Apache CloudStack: Domain Admin can reset Admin password in Root Domain Affected: 4.10.0.0 before 4.19.3.0; 4.20.0.0 before 4.20.1.0 |
| CVE-2024-45693 | 8.8 | Oct 16 | Apache CloudStack: Request origin validation bypass makes account takeover possible Affected: 4.15.1.0 before 4.18.2.4; 4.19.0.0 before 4.19.1.2 |
| CVE-2024-45219 | 8.5 | Oct 16 | Apache CloudStack: Uploaded and registered templates and volumes can be used to abuse KVM-based infrastructure Affected: 4.0.0 before 4.18.2.4; 4.19.0.0 before 4.19.1.2 |
| CVE-2026-68745 | 8.1 | Aug 21 | Apache CloudStack: SAML2 Signature Validation Silently Skipped for Cert-less IdP Affected: 4.5.2 before 4.20.3.1; 4.22.1.0 |
| CVE-2025-66467 | 8.1 | May 8 | Apache CloudStack: MinIO policy remains intact on bucket deletion Affected: 4.19.0.0 before 4.20.3.0; 4.21.0.0 before 4.22.0.1 |
| CVE-2025-66172 | 8.1 | May 8 | Apache CloudStack: Any user can attach a volume in their VMs from backups they should not have access to Affected: 4.21.0.0 before 4.22.0.1 |
| CVE-2025-26521 | 8.1 | Jun 10 | Apache CloudStack: CKS cluster in project exposes user API keys Affected: 4.17.0.0 before 4.19.3.0; 4.20.0.0 before 4.20.1.0 |
| CVE-2024-41107 | 8.1 | Jul 19 | The CloudStack SAML authentication (disabled by default) does not enforce signature check Affected: 4.5.0 before 4.18.2.2; 4.19.0.0 before 4.19.1.0 |
| CVE-2026-59654 | 7.5 | Aug 21 | Apache CloudStack: DoS caused by database connections leak Affected: 4.7.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-50222 | 7.5 | Aug 21 | Apache CloudStack: Improper access control in Userdata reference APIs Affected: 4.18.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-59655 | 7.5 | Aug 21 | Apache CloudStack: Unauthenticated OAuth provider client-secret disclosure Affected: 4.19.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-59657 | 7.5 | Aug 21 | Apache CloudStack: Sensitive Information Disclosure via Cleartext Storage in AsyncJob Affected: 4.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-59780 | 7.5 | Aug 21 | Apache CloudStack: LDAP provider configuration disclosure Affected: 4.2.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-61397 | 7.5 | Aug 21 | Apache CloudStack: OAuth2 Token Cross-Request Leak Affected: 4.19.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2022-26779 | 7.5 | Mar 15 | Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens Affected: before 4.16.1.0 |
| CVE-2024-29007 | 7.3 | Apr 4 | The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects… Affected: 4.9.1.0 before 4.18.1.1; 4.19.0.0 |
| CVE-2026-66722 | 7.2 | Aug 21 | Apache CloudStack: ProjectRole & ProjectRolePermission authorization issue Affected: 4.15.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2024-42062 | 7.2 | Aug 7 | CloudStack account-users by default use username and password based authentication for API and UI access Affected: 4.10.0.0 before 4.18.2.3; 4.19.0.0 before 4.19.1.1 |
| CVE-2024-45462 | 7.1 | Oct 16 | Apache CloudStack: Incomplete session invalidation on web interface logout Affected: 4.15.1.0 before 4.18.2.4; 4.19.0.0 before 4.19.1.2 |
| CVE-2025-66171 | 6.5 | May 8 | Apache CloudStack: Any user can create a new VM from backups they should not have access to Affected: 4.21.0.0 before 4.22.0.1 |
| CVE-2025-66170 | 6.5 | May 8 | Apache CloudStack: Any user can list backups that they should not have access to Affected: 4.21.0.0 before 4.22.0.1 |
| CVE-2016-3085 | 6.5 | Jun 10 | Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML-based authentication is enabled and used, allow remote… Affected: 4.7.0; 4.5.1; 4.5.2; 4.6.0; 4.6.1; 4.6.2; +1 more |
| CVE-2024-29008 | 6.4 | Apr 4 | A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a VM instance or… Affected: 4.14.0.0 before 4.18.1.1; 4.19.0.0 |
| CVE-2024-45461 | 6.3 | Oct 16 | Apache CloudStack Quota plugin: Access checks not enforced in Quota Affected: 4.7.0 before 4.18.2.4; 4.19.0.0 before 4.19.1.2 |
| CVE-2026-66797 | 5.4 | Aug 21 | Apache CloudStack: Unauthorised comment creation and disclosure Affected: 4.15.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2025-69233 | 5.3 | May 8 | Apache CloudStack: Domain/account resources limits not honored Affected: 4.0.0 before 4.20.3.0; 4.21.0.0 before 4.22.0.1 |
| CVE-2015-3251 | 4.9 | Feb 8 | Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified… Affected: 4.4.4; 4.5.1 |
| CVE-2026-61399 | 4.8 | Aug 21 | Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Lock User Function in UI Affected: 4.20.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2025-59302 | 4.7 | Nov 27 | Apache CloudStack: Potential remote code execution on Javascript engine defined rules Affected: 4.18.0.0 before 4.20.2.0; 4.21.0.0 |
| CVE-2025-30675 | 4.7 | Jun 10 | Apache CloudStack: Unauthorised template/ISO list access to the domain/resource admins Affected: 4.0.0 before 4.19.3.0; 4.20.0.0 before 4.20.1.0 |
| CVE-2026-61422 | 4.3 | Aug 21 | Apache CloudStack: Authenticated pre-validation SSRF in registerTemplate Affected: 4.21.0.0 before 4.22.1.1; 4.20.3.0 |
| CVE-2026-65613 | 4.3 | Aug 21 | Apache CloudStack: Webhook Deliveries Incorrect Access Affected: 4.20.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |