AC
Product
Apache CloudStack
39
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 21Medium 12Low 1
Watch
Add Apache CloudStack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-50386 | 9.9 | Nov 12 | Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure Affected: 4.0.0 through 4.18.2.4; 4.19.0.0 through 4.19.1.2 |
| CVE-2026-59085 | 9.1 | Aug 21 | Apache CloudStack: Server-Side Request Forgery (SSRF) vulnerability in webhook module Affected: 4.20.0.0 through 4.20.3.0; 4.21.0.0 through 4.22.1.0 |
| CVE-2026-61398 | 9.1 | Aug 21 | Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI Affected: 4.15.1.0 through 4.20.3.0; 4.21.0.0 through 4.22.1.0 |
| CVE-2026-62440 | 9.1 | Aug 21 | Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulation Affected: 4.21.0.0 through 4.22.1.0 |
| CVE-2026-25199 | 9.1 | May 8 | Apache CloudStack: Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access Affected: 4.21.0 through 4.22.0 |
Showing 5