| CVE-2024-50386 |
Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary…
|
8.5
High
|
Nov 12, 2024 |
| CVE-2024-45693 |
Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to…
|
8.0
High
|
Oct 16, 2024 |
| CVE-2024-42062 |
CloudStack account-users by default use username and password based authentication for API and UI access
|
Not rated
|
Aug 7, 2024 |
| CVE-2024-38346 |
The CloudStack cluster service runs on unauthenticated port (default 9090) that can be misused to run arbitrary commands…
|
Not rated
|
Jul 5, 2024 |
| CVE-2024-29008 |
A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused…
|
Not rated
|
Apr 4, 2024 |
| CVE-2024-29007 |
The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or…
|
Not rated
|
Apr 4, 2024 |