Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Cloudstack
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-6398 1 Apache 1 Cloudstack 2024-02-04 2.8 LOW N/A
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.
CVE-2012-4501 2 Apache, Citrix 2 Cloudstack, Cloudstack 2024-02-04 10.0 HIGH N/A
Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs.