AC
Product
Apache CloudStack
27
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 4High 15Medium 7Low 1
Watch
Add Apache CloudStack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-66171 | 6.5 | May 8 | Apache CloudStack: Any user can create a new VM from backups they should not have access to Affected: 4.21.0.0 through 4.22.0.0 |
| CVE-2025-66170 | 6.5 | May 8 | Apache CloudStack: Any user can list backups that they should not have access to Affected: 4.21.0.0 through 4.22.0.0 |
| CVE-2026-66797 | 5.4 | Aug 21 | Apache CloudStack: Unauthorised comment creation and disclosure Affected: 4.16.0.0 through 4.20.3.0; 4.21.0.0 through 4.22.1.0 |
| CVE-2025-69233 | 5.3 | May 8 | Apache CloudStack: Domain/account resources limits not honored Affected: 4.0.0 through 4.20.2.0; 4.21.0.0 through 4.22.0.0 |
| CVE-2026-61399 | 4.8 | Aug 21 | Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Lock User Function in UI Affected: 4.20.0.0 through 4.20.3.0; 4.21.0.0 through 4.22.1.0 |
| CVE-2026-61422 | 4.3 | Aug 21 | Apache CloudStack: Authenticated pre-validation SSRF in registerTemplate Affected: 4.20.3.0; 4.21.0.0 through 4.22.1.0 |
| CVE-2026-65613 | 4.3 | Aug 21 | Apache CloudStack: Webhook Deliveries Incorrect Access Affected: 4.20.0.0 through 4.20.3.0; 4.21.0.0 through 4.22.1.0 |
Showing 7