Login Request a demo
AC
Product
Apache CloudStack
by Apache Software Foundation · last CVE Aug 21, 2026
39
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities39In the news0Timeline
Severity mix
Critical 5High 21Medium 12Low 1
Severity
All severities39Critical5High21Medium12Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache CloudStack to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-66171
6.5
1%
May 8
Apache CloudStack: Any user can create a new VM from backups they should not have access to
Affected: 4.21.0.0 through 4.22.0.0
CVE-2025-66170
6.5
0%
May 8
Apache CloudStack: Any user can list backups that they should not have access to
Affected: 4.21.0.0 through 4.22.0.0
CVE-2026-66797
5.4
0%
Aug 21
Apache CloudStack: Unauthorised comment creation and disclosure
Affected: 4.16.0.0 through 4.20.3.0; 4.21.0.0 through 4.22.1.0
CVE-2025-69233
5.3
0%
May 8
Apache CloudStack: Domain/account resources limits not honored
Affected: 4.0.0 through 4.20.2.0; 4.21.0.0 through 4.22.0.0
CVE-2026-61399
4.8
1%
Aug 21
Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Lock User Function in UI
Affected: 4.20.0.0 through 4.20.3.0; 4.21.0.0 through 4.22.1.0
CVE-2025-59302
4.7
0%
Nov 27
Apache CloudStack: Potential remote code execution on Javascript engine defined rules
Affected: 4.18.0 before 4.20.2; 4.21.0 before 4.22.0
CVE-2025-30675
4.7
1%
Jun 10
Apache CloudStack: Unauthorised template/ISO list access to the domain/resource admins
Affected: 4.0.0 before 4.19.3.0; 4.20.0.0 before 4.20.1.0
CVE-2026-61422
4.3
0%
Aug 21
Apache CloudStack: Authenticated pre-validation SSRF in registerTemplate
Affected: 4.20.3.0; 4.21.0.0 through 4.22.1.0
CVE-2026-65613
4.3
0%
Aug 21
Apache CloudStack: Webhook Deliveries Incorrect Access
Affected: 4.20.0.0 through 4.20.3.0; 4.21.0.0 through 4.22.1.0
CVE-2025-59454
4.3
0%
Nov 27
Apache CloudStack: Lack of user permission validation leading to data leak for few APIs
Affected: 4.0.0 before 4.20.2; 4.21.0 before 4.22.0
CVE-2025-22829
4.3
1%
Jun 10
Apache CloudStack: Unauthorised access to dedicated resources in Quota plugin
Affected: 4.20.0.0 before 4.20.1.0
CVE-2025-22828
4.3
2%
Jan 13
Apache CloudStack: Unauthorised access to annotations
Affected: 4.16.0
Showing 12