Cloudstack (Apache) - vulnerabilities (CVEs)

65 CVEs, 0 in the last 30 days, 117 known versions, newest CVE from 2026-08-21. Vendor: Apache.

CVEs of Cloudstack

CVE-2026-59654 - CVSS 7.5 (high), 2026-08-21: Missing Release of Resource after Effective Lifetime vulnerability in Apache CloudStack's scoped global configuration functionality. It affects different…
CVE-2026-47359 - CVSS 8.8 (high), 2026-08-21: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache CloudStack's NAS backup provider…
CVE-2026-50112 - CVSS 8.8 (high), 2026-08-21: SSRF via Metalink Mirror URL Resolution: An authenticated tenant can register a template pointing to an attacker-controlled metalink file containing internal…
CVE-2026-50222 - CVSS 7.5 (high), 2026-08-21: Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Userdata reference APIs. Several…
CVE-2026-59085 - CVSS 9.1 (critical), 2026-08-21: Server-Side Request Forgery (SSRF) vulnerability in Apache CloudStack's webhook module, exploitable via webhook delivery requests. This issue affects Apache…
CVE-2026-59655 - CVSS 7.5 (high), 2026-08-21: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth authentication plugin while listing OAuth providers.…
CVE-2026-59657 - CVSS 7.5 (high), 2026-08-21: Cleartext Storage of Sensitive Information vulnerability in Apache CloudStack with AsyncJob storage in the database. This issue affects Apache CloudStack:…
CVE-2026-59780 - CVSS 7.5 (high), 2026-08-21: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's LDAP authentication plugin while listing LDAP providers. LDAP…
CVE-2026-59799 - CVSS 8.8 (high), 2026-08-21: Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable…
CVE-2026-61397 - CVSS 7.5 (high), 2026-08-21: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication plugin and Google OAuth integration.…
CVE-2026-61398 - CVSS 9.1 (critical), 2026-08-21: Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password functionality. This issue affects Apache…
CVE-2026-61399 - CVSS 4.8 (medium), 2026-08-21: Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Lock User Functionality. This issue affects Apache CloudStack:…
CVE-2026-61400 - CVSS 8.8 (high), 2026-08-21: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache CloudStack's run and get diagnostics functionality…
CVE-2026-61422 - CVSS 4.3 (medium), 2026-08-21: Authenticated pre-validation SSRF vulnerability in Apache CloudStack's template and ISO registration functionality. When registering a template or ISO,…
CVE-2026-62440 - CVSS 9.1 (critical), 2026-08-21: Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service (CKS) plugin, allowing cross-tenant manipulation of the Kubernetes cluster…
CVE-2026-65613 - CVSS 4.3 (medium), 2026-08-21: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while listing and deleting deliveries. This…
CVE-2026-66721 - CVSS 2.7 (low), 2026-08-21: Missing authorization issue for domain admins in CloudStack's host tags listing functionality. Domain Admins, by default, have permission to call the…
CVE-2026-66722 - CVSS 7.2 (high), 2026-08-21: Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update,…
CVE-2026-66797 - CVSS 5.4 (medium), 2026-08-21: Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure. The addAnnotation and listAnnotation…
CVE-2026-68745 - CVSS 8.1 (high), 2026-08-21: Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML…
CVE-2026-25077 - CVSS 8.8 (high), 2026-05-08: Account users are allowed by default to register templates to be downloaded directly to the primary storage for deploying instances using the KVM hypervisor.…
CVE-2026-25199 - CVSS 9.1 (critical), 2026-05-08: Instances deployed via the Proxmox extension allow unauthorized access to instances belonging to other tenants. This issue affects Apache CloudStack: from…
CVE-2025-66172 - CVSS 8.1 (high), 2026-05-08: The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack…
CVE-2025-66171 - CVSS 6.5 (medium), 2026-05-08: The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack…
CVE-2025-69233 - CVSS 6.5 (medium), 2026-05-08: Due to multiple time-of-check time-of-use race conditions in the resource count check and increment logic, as well as missing validations, users of the…
CVE-2025-66170 - CVSS 6.5 (medium), 2026-05-08: The CloudStack Backup plugin has an improper authorization logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in…
CVE-2025-66467 - CVSS 8.1 (high), 2026-05-08: Missing MinIO policy cleanup on bucket deletion via Apache CloudStack allows users to retain access to buckets which they previously owned. If another user…
CVE-2025-59454 - CVSS 4.3 (medium), 2025-11-27: In Apache CloudStack, a gap in access control checks affected the APIs - createNetworkACL - listNetworkACLs - listResourceDetails -…
CVE-2025-59302 - CVSS 4.7 (medium), 2025-11-27: In Apache CloudStack improper control of generation of code ('Code Injection') vulnerability is found in the following APIs which are accessible only to…
CVE-2025-30675 - CVSS 4.7 (medium), 2025-06-11: In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue…
CVE-2025-47849 - CVSS 8.8 (high), 2025-06-10: A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can…
CVE-2025-47713 - CVSS 8.8 (high), 2025-06-10: A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can…
CVE-2025-26521 - CVSS 8.1 (high), 2025-06-10: When an Apache CloudStack user-account creates a CKS-based Kubernetes cluster in a project, the API key and the secret key of the 'kubeadmin' user of the…
CVE-2025-22829 - CVSS 4.3 (medium), 2025-06-10: The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0. Anyone with authenticated user-account access in CloudStack…
CVE-2025-22828 - CVSS 4.3 (medium), 2025-01-13: CloudStack users can add and read comments (annotations) on resources they are authorised to access. Due to an access validation issue that affects Apache…
CVE-2024-50386 - CVSS 9.9 (critical), 2024-11-12: Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due…
CVE-2024-45693 - CVSS 8.8 (high), 2024-10-16: Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing validation of the origin of the…
CVE-2024-45462 - CVSS 7.1 (high), 2024-10-16: The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend…
CVE-2024-45461 - CVSS 6.3 (medium), 2024-10-16: The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In…
CVE-2024-45219 - CVSS 8.5 (high), 2024-10-16: Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data…
CVE-2024-42222 - CVSS 4.3 (medium), 2024-08-07: In Apache CloudStack 4.19.1.0, a regression in the network listing API allows unauthorised list access of network details for domain admin and normal user…
CVE-2024-42062 - CVSS 7.2 (high), 2024-08-07: CloudStack account-users by default use username and password based authentication for API and UI access. Account-users can generate and register randomised…
CVE-2024-41107 - CVSS 8.1 (high), 2024-07-19: The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an…
CVE-2024-39864 - CVSS 9.8 (critical), 2024-07-05: The CloudStack integration API service allows running its unauthenticated API server (usually on port 8096 when configured and enabled via…
CVE-2024-38346 - CVSS 9.8 (critical), 2024-07-05: The CloudStack cluster service runs on unauthenticated port (default 9090) that can be misused to run arbitrary commands on targeted hypervisors and…
CVE-2024-29008 - CVSS 6.4 (medium), 2024-04-04: A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a…
CVE-2024-29007 - CVSS 7.3 (high), 2024-04-04: The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301…
CVE-2024-29006 - CVSS 9.8 (critical), 2024-04-04: By default the CloudStack management server honours the x-forwarded-for HTTP header and logs it as the source IP of an API request. This could lead to…
CVE-2022-35741 - CVSS 9.8 (critical), 2022-07-18: Apache CloudStack version 4.5.0 and later has a SAML 2.0 authentication Service Provider plugin which is found to be vulnerable to XML external entity (XXE)…
CVE-2022-26779 - CVSS 7.5 (high), 2022-03-15: Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. If a project invite is created based only on an…
CVE-2019-17562 - CVSS 9.8 (critical), 2020-05-14: A buffer overflow vulnerability has been found in the baremetal component of Apache CloudStack. This applies to all versions prior to 4.13.1. The…
CVE-2016-6813 - CVSS 9.8 (critical), 2018-02-06: Apache CloudStack 4.1 to 4.8.1.0 and 4.9.0.0 contain an API call designed to allow a user to register for the developer API. If a malicious user is able to…
CVE-2013-4317 - CVSS 4.3 (medium), 2018-02-06: In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-administrative user, the user is able to see…
CVE-2016-3085 - CVSS 6.5 (medium), 2016-06-10: Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML-based authentication is enabled and…
CVE-2015-3252 - CVSS 9.8 (critical), 2016-02-08: Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by…
CVE-2015-3251 - CVSS 4.9 (medium), 2016-02-08: Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines…
CVE-2014-9593 - CVSS 5 (medium), 2015-01-15: Apache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to obtain private keys via a listSslCerts API call.
CVE-2014-7807 - CVSS 5 (medium), 2014-12-10: Apache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass authentication via a login request without a password, which…
CVE-2013-2758 - CVSS 5 (medium), 2014-05-23: Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C uses a hash of a predictable sequence,…
CVE-2013-2756 - CVSS 5 (medium), 2014-05-23: Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C allows remote attackers to bypass the…
CVE-2014-0031 - CVSS 4 (medium), 2014-01-15: The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other…
CVE-2013-6398 - CVSS 2.8 (low), 2014-01-15: The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote…
CVE-2013-2136 - CVSS 4.3 (medium), 2013-08-19: Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the…
CVE-2012-5616 - CVSS 1.5 (low), 2013-01-22: Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3.0.6 stores sensitive information in the log4j.conf log file,…
CVE-2012-4501 - CVSS 10 (critical), 2012-10-26: Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as…