Cloudstack@3.0.0 Security Vulnerabilities and Issues — Cloudstack@3.0.0 CVE List

Lucene search

ApacheCloudstack3.0.0

3 matches found

CVE•added 2013/08/19 11:55 p.m.•40 views

CVE-2013-2136

Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizard; (2) New network name, (3) instance name, or (4) group to the Instance wizard; (5) unspecified "mu...

4.3CVSS5.8AI score0.06724EPSS

CVE•added 2014/01/15 4:8 p.m.•38 views

CVE-2014-0031

The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request.

4CVSS6.4AI score0.00323EPSS

CVE•added 2014/01/15 4:8 p.m.•31 views

CVE-2013-6398

The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.

2.8CVSS6.7AI score0.00989EPSS