Apache Cloudstack vulnerabilities
65 published vulnerabilities in Apache Cloudstack. The most were published in 2026 (22), and 22 so far in 2026.
Apache Cloudstack vulnerabilities by year
2012
2013
2014
2015
2016
2019
2022
2024
2025
2026
Most exploited Apache Cloudstack vulnerabilities
- CVE-2012-4501 Missing authorization in n/a
- CVE-2024-38346 Apache CloudStack: Unauthenticated cluster service port leads to remote execution
- CVE-2024-39864 Apache CloudStack: Integration API service uses dynamic port when disabled
- CVE-2024-29006 Apache CloudStack: x-forwarded-for HTTP header parsed by default
- CVE-2022-35741 Apache CloudStack SAML Single Sign-On XXE
- CVE-2019-17562 Command injection in Apache CloudStack
- CVE-2016-6813 Missing authorization in Apache CloudStack
- CVE-2015-3252 Information disclosure in n/a
- CVE-2026-59085 Apache CloudStack: Server-Side Request Forgery (SSRF) vulnerability in webhook module
- CVE-2026-61398 Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI
- CVE-2026-62440 Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulation
- CVE-2026-25199 Apache CloudStack: Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.