CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2026/05/08 12:00 a.m.•0 views

CVE-2025-66171: Exposure of Private Personal Information to an Unauthorized Actor

The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can create new VMs using backups of any other user of the...

6.5CVSS5.7AI score0.0053EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2026/05/08 12:00 a.m.•2 views

CVE-2025-66172: Exposure of Private Personal Information to an Unauthorized Actor

The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can restore a volume from any other user's backups and...

8.1CVSS5.7AI score0.00512EPSS

SaveExploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by