CVE-2024-39864

The CVE-2024-39864 issue affects Apache CloudStack's Integration API service. When integration.api.port is set to 0 (default), an improper initialisation causes the unauthenticated integration API server to listen on a random port. An attacker with access to the CloudStack management network coul...

CVE-2024-29006

The CVE-2024-29006 issue affects the CloudStack management server, where the system by default accepts and logs the x-forwarded-for header as the source IP for API requests. This misconfiguration can enable authentication bypass and other operational problems if an attacker spoofs their IP. Publi...

CVE-2024-38346

CVE-2024-38346 affects Apache CloudStack’s cluster service that runs on an unauthenticated port (default 9090). The provided documents describe a code-injection vulnerability enabling remote code execution on targeted hypervisors and CloudStack management server hosts, potentially leading to comp...

CVE-2022-35741

The CVE-2022-35741 issue affects Apache CloudStack 4.5.0 and later, specifically the SAML 2.0 authentication Service Provider plugin. The vulnerability is XML External Entity (XXE) injection in the XML-based SAML messages parsed during authentication. Attacker must have the plugin enabled (not en...

CVE-2024-50386

CVE-2024-50386 affects Apache CloudStack where by default, derived KVM-compatible templates can be registered for download to primary storage. The root cause is missing validation checks for KVM templates in CloudStack versions 4.0.0–4.18.2.4 and 4.19.0–4.19.1.2. An attacker able to register temp...

CVE-2016-6813

CVE-2016-6813 affects Apache CloudStack 4.1–4.8.1.0 and 4.9.0.0. The issue is an API call that lets a user register for the developer API, and if the attacker can determine another non-root user’s CloudStack ID, they may reset that user’s API keys and gain access to their account and resources. T...

CVE-2019-17562

Apache CloudStack baremetal component contains a buffer overflow (affecting all versions prior to 4.13.1) caused by inadequate validation of the mac parameter in baremetal virtual router. An attacker can inject shell commands via the mac field (example: /baremetal/provisiondone/{mac} with special...

CVE-2015-3252

Apache CloudStack vulnerability CVE-2015-3252 affects CloudStack before 4.5.2 (4.5.1 and earlier per CNVD). The issue arises from improper preservation of VNC passwords during KVM VM migrations, enabling a remote attacker to gain access by connecting to the VNC server. According to the sources, t...

CVE-2026-25199

Apache CloudStack versions 4.21.0.0 through 4.22.0.0 are vulnerable to a flaw in the Proxmox extension that allows for unauthorized cross-tenant access. The extension fails to validate the user-editable instance setting proxmox_vmid against tenant ownership. Because Proxmox VM IDs are predictable...

CVE-2026-61398

Apache CloudStack is vulnerable to a Cross-Site Scripting (XSS) issue due to improper encoding or escaping of output in the user interface. This vulnerability is triggered when using the Instance Reset Password functionality. The flaw allows for the injection of malicious scripts into web pages v...

CVE-2026-59085

A Server-Side Request Forgery (SSRF) vulnerability exists in the webhook module of Apache CloudStack . This flaw allows an attacker to induce the server-side application to make requests to unintended locations via webhook delivery requests . The vulnerability affects versions 4.20.0.0 through 4....

CVE-2026-62440

An Improper Access Control vulnerability exists in the Kubernetes Service (CKS) plugin of Apache CloudStack , affecting versions 4.21.0.0 through 4.22.1.0 . This flaw allows for cross-tenant manipulation of the Kubernetes cluster specifically during the processes of adding and removing nodes . To...