agentprime: apache-software-foundation-apache-cloudstack

agentprime: apache-software-foundation-apache-cloudstackEvery new CVE for apache-software-foundation-apache-cloudstack.https://agentprime.io/CVE-2026-59654: Apache CloudStack: DoS caused by database connections leakhttps://agentprime.io/advisories/CVE-2026-59654/https://agentprime.io/advisories/CVE-2026-59654/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 12:33:00 GMTCVECVE-2026-47359: Apache CloudStack: OS Command Injection due to unsanitized mount commandhttps://agentprime.io/advisories/CVE-2026-47359/https://agentprime.io/advisories/CVE-2026-47359/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:30:07 GMTCVECVE-2026-50112: Apache CloudStack: RCE and SSRF in direct download, metalink and NFS templateshttps://agentprime.io/advisories/CVE-2026-50112/https://agentprime.io/advisories/CVE-2026-50112/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:29:41 GMTCVECVE-2026-50222: Apache CloudStack: Improper access control in Userdata reference APIshttps://agentprime.io/advisories/CVE-2026-50222/https://agentprime.io/advisories/CVE-2026-50222/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:29:17 GMTCVECVE-2026-59085: Apache CloudStack: Server-Side Request Forgery (SSRF) vulnerability in webhook modulehttps://agentprime.io/advisories/CVE-2026-59085/https://agentprime.io/advisories/CVE-2026-59085/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:28:51 GMTCVEcriticalCVE-2026-59655: Apache CloudStack: Unauthenticated OAuth provider client-secret disclosurehttps://agentprime.io/advisories/CVE-2026-59655/https://agentprime.io/advisories/CVE-2026-59655/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:28:14 GMTCVECVE-2026-59657: Apache CloudStack: Sensitive Information Disclosure via Cleartext Storage in AsyncJobhttps://agentprime.io/advisories/CVE-2026-59657/https://agentprime.io/advisories/CVE-2026-59657/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:27:53 GMTCVECVE-2026-59780: Apache CloudStack: LDAP provider configuration disclosurehttps://agentprime.io/advisories/CVE-2026-59780/https://agentprime.io/advisories/CVE-2026-59780/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:27:16 GMTCVECVE-2026-59799: Apache CloudStack: Missing Privilege Check in Two-Factor Authentication Disable Flowhttps://agentprime.io/advisories/CVE-2026-59799/https://agentprime.io/advisories/CVE-2026-59799/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:26:52 GMTCVECVE-2026-61397: Apache CloudStack: OAuth2 Token Cross-Request Leakhttps://agentprime.io/advisories/CVE-2026-61397/https://agentprime.io/advisories/CVE-2026-61397/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:26:25 GMTCVECVE-2026-61398: Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UIhttps://agentprime.io/advisories/CVE-2026-61398/https://agentprime.io/advisories/CVE-2026-61398/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:25:47 GMTCVEcriticalCVE-2026-61399: Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Lock User Function in UIhttps://agentprime.io/advisories/CVE-2026-61399/https://agentprime.io/advisories/CVE-2026-61399/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:25:23 GMTCVECVE-2026-61400: Apache CloudStack: Get and Run Diagnostics Command Injectionhttps://agentprime.io/advisories/CVE-2026-61400/https://agentprime.io/advisories/CVE-2026-61400/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:25:02 GMTCVECVE-2026-61422: Apache CloudStack: Authenticated pre-validation SSRF in registerTemplatehttps://agentprime.io/advisories/CVE-2026-61422/https://agentprime.io/advisories/CVE-2026-61422/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:24:38 GMTCVECVE-2026-62440: Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulationhttps://agentprime.io/advisories/CVE-2026-62440/https://agentprime.io/advisories/CVE-2026-62440/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:23:55 GMTCVEcriticalCVE-2026-65613: Apache CloudStack: Webhook Deliveries Incorrect Accesshttps://agentprime.io/advisories/CVE-2026-65613/https://agentprime.io/advisories/CVE-2026-65613/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:23:30 GMTCVECVE-2026-66721: Apache CloudStack: Authorization issue with listHostTags for domain adminshttps://agentprime.io/advisories/CVE-2026-66721/https://agentprime.io/advisories/CVE-2026-66721/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:23:00 GMTCVECVE-2026-66722: Apache CloudStack: ProjectRole & ProjectRolePermission authorization issuehttps://agentprime.io/advisories/CVE-2026-66722/https://agentprime.io/advisories/CVE-2026-66722/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:22:36 GMTCVECVE-2026-66797: Apache CloudStack: Unauthorised comment creation and disclosurehttps://agentprime.io/advisories/CVE-2026-66797/https://agentprime.io/advisories/CVE-2026-66797/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:21:58 GMTCVECVE-2026-68745: Apache CloudStack: SAML2 Signature Validation Silently Skipped for Cert-less IdPhttps://agentprime.io/advisories/CVE-2026-68745/https://agentprime.io/advisories/CVE-2026-68745/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 08:21:29 GMTCVECVE-2026-25199: Apache CloudStack: Proxmox Extension Allows Unauthorized Cross-Tenant Instance Accesshttps://agentprime.io/advisories/CVE-2026-25199/https://agentprime.io/advisories/CVE-2026-25199/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 12:22:56 GMTCVEcriticalCVE-2026-25077: Apache CloudStack: Unauthenticated Command Injection in Direct Download Templateshttps://agentprime.io/advisories/CVE-2026-25077/https://agentprime.io/advisories/CVE-2026-25077/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 12:21:27 GMTCVECVE-2025-69233: Apache CloudStack: Domain/account resources limits not honoredhttps://agentprime.io/advisories/CVE-2025-69233/https://agentprime.io/advisories/CVE-2025-69233/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 12:19:30 GMTCVECVE-2025-66467: Apache CloudStack: MinIO policy remains intact on bucket deletionhttps://agentprime.io/advisories/CVE-2025-66467/https://agentprime.io/advisories/CVE-2025-66467/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 12:16:04 GMTCVECVE-2025-66172: Apache CloudStack: Any user can attach a volume in their VMs from backups they should not have access tohttps://agentprime.io/advisories/CVE-2025-66172/https://agentprime.io/advisories/CVE-2025-66172/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 12:13:18 GMTCVECVE-2025-66171: Apache CloudStack: Any user can create a new VM from backups they should not have access tohttps://agentprime.io/advisories/CVE-2025-66171/https://agentprime.io/advisories/CVE-2025-66171/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 12:11:03 GMTCVECVE-2025-66170: Apache CloudStack: Any user can list backups that they should not have access tohttps://agentprime.io/advisories/CVE-2025-66170/https://agentprime.io/advisories/CVE-2025-66170/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 12:06:32 GMTCVECVE-2025-59302: Apache CloudStack: Potential remote code execution on Javascript engine defined ruleshttps://agentprime.io/advisories/CVE-2025-59302/https://agentprime.io/advisories/CVE-2025-59302/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Nov 2025 11:46:25 GMTCVECVE-2025-59454: Apache CloudStack: Lack of user permission validation leading to data leak for few APIshttps://agentprime.io/advisories/CVE-2025-59454/https://agentprime.io/advisories/CVE-2025-59454/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Nov 2025 11:40:40 GMTCVECVE-2025-30675: Apache CloudStack: Unauthorised template/ISO list access to the domain/resource adminshttps://agentprime.io/advisories/CVE-2025-30675/https://agentprime.io/advisories/CVE-2025-30675/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Jun 2025 23:12:23 GMTCVECVE-2025-22829: Apache CloudStack: Unauthorised access to dedicated resources in Quota pluginhttps://agentprime.io/advisories/CVE-2025-22829/https://agentprime.io/advisories/CVE-2025-22829/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Jun 2025 23:11:24 GMTCVECVE-2025-26521: Apache CloudStack: CKS cluster in project exposes user API keyshttps://agentprime.io/advisories/CVE-2025-26521/https://agentprime.io/advisories/CVE-2025-26521/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Jun 2025 23:08:48 GMTCVECVE-2025-47849: Apache CloudStack: Insecure access of user's API/Secret Keys in the same domainhttps://agentprime.io/advisories/CVE-2025-47849/https://agentprime.io/advisories/CVE-2025-47849/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Jun 2025 23:07:54 GMTCVECVE-2025-47713: Apache CloudStack: Domain Admin can reset Admin password in Root Domainhttps://agentprime.io/advisories/CVE-2025-47713/https://agentprime.io/advisories/CVE-2025-47713/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Jun 2025 23:06:45 GMTCVECVE-2025-22828: Apache CloudStack: Unauthorised access to annotationshttps://agentprime.io/advisories/CVE-2025-22828/https://agentprime.io/advisories/CVE-2025-22828/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jan 2025 12:47:51 GMTCVECVE-2024-50386: Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructurehttps://agentprime.io/advisories/CVE-2024-50386/https://agentprime.io/advisories/CVE-2024-50386/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 14:34:08 GMTCVECVE-2024-45219: Apache CloudStack: Uploaded and registered templates and volumes can be used to abuse KVM-based infrastructurehttps://agentprime.io/advisories/CVE-2024-45219/https://agentprime.io/advisories/CVE-2024-45219/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Oct 2024 07:55:02 GMTCVECVE-2024-45462: Apache CloudStack: Incomplete session invalidation on web interface logouthttps://agentprime.io/advisories/CVE-2024-45462/https://agentprime.io/advisories/CVE-2024-45462/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Oct 2024 07:53:40 GMTCVECVE-2024-45693: Apache CloudStack: Request origin validation bypass makes account takeover possiblehttps://agentprime.io/advisories/CVE-2024-45693/https://agentprime.io/advisories/CVE-2024-45693/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Oct 2024 07:52:25 GMTCVECVE-2024-42062: Apache CloudStack: User Key Exposure to Domain Adminshttps://agentprime.io/advisories/CVE-2024-42062/https://agentprime.io/advisories/CVE-2024-42062/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Aug 2024 07:17:08 GMTCVECVE-2024-42222: Apache CloudStack: Unauthorised Network List Accesshttps://agentprime.io/advisories/CVE-2024-42222/https://agentprime.io/advisories/CVE-2024-42222/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Aug 2024 07:16:13 GMTCVECVE-2024-41107: Apache CloudStack: SAML Signature Exclusionhttps://agentprime.io/advisories/CVE-2024-41107/https://agentprime.io/advisories/CVE-2024-41107/CVSS 8.1 (High). Critical: CVSS score 8.1 (7.0 or more) and EPSS 0.18 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jul 2024 10:19:53 GMTCVEcriticalCVE-2024-38346: Apache CloudStack: Unauthenticated cluster service port leads to remote executionhttps://agentprime.io/advisories/CVE-2024-38346/https://agentprime.io/advisories/CVE-2024-38346/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jul 2024 13:40:57 GMTCVEcriticalCVE-2024-39864: Apache CloudStack: Integration API service uses dynamic port when disabledhttps://agentprime.io/advisories/CVE-2024-39864/https://agentprime.io/advisories/CVE-2024-39864/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jul 2024 13:40:37 GMTCVEcriticalCVE-2024-29008: Apache CloudStack: The extraconfig feature can be abused to load hypervisor resources on a VM instancehttps://agentprime.io/advisories/CVE-2024-29008/https://agentprime.io/advisories/CVE-2024-29008/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 07:51:05 GMTCVECVE-2024-29007: Apache CloudStack: When downloading templates or ISOs, the management server and SSVM follow HTTP redirects with potentially dangerous consequenceshttps://agentprime.io/advisories/CVE-2024-29007/https://agentprime.io/advisories/CVE-2024-29007/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 07:49:57 GMTCVECVE-2024-29006: Apache CloudStack: x-forwarded-for HTTP header parsed by defaulthttps://agentprime.io/advisories/CVE-2024-29006/https://agentprime.io/advisories/CVE-2024-29006/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 07:48:54 GMTCVEcriticalCVE-2022-35741: Apache CloudStack SAML Single Sign-On XXEhttps://agentprime.io/advisories/CVE-2022-35741/https://agentprime.io/advisories/CVE-2022-35741/Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 Jul 2022 14:30:14 GMTCVECVE-2022-26779: Apache Cloudstack insecure random number generation affects project email invitationhttps://agentprime.io/advisories/CVE-2022-26779/https://agentprime.io/advisories/CVE-2022-26779/Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Mar 2022 15:40:11 GMTCVECVE-2016-6813: Apache Software Foundation Apache CloudStack: Apache CloudStack 4.1 to 4.8.1.0 and 4.9.0.0 contain an API call designed to allow a user…https://agentprime.io/advisories/CVE-2016-6813/https://agentprime.io/advisories/CVE-2016-6813/Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Feb 2018 14:00:00 GMTCVE