Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache CloudStack

51 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-22828 Public exploit

    Apache CloudStack: Unauthorised access to annotations

    CloudStack users can add and read comments (annotations) on resources they are authorised to access.  Due to an access validation issue that affects Apache CloudStack versions from 4.16.0, users who have access, prior access or knowledge of resource UUIDs can…

    Apache Software Foundation Apache CloudStack
  • High 8.1
    CVE-2024-41107 Public exploit EPSS 18%

    Apache CloudStack: SAML Signature Exclusion

    The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication…

    Apache Software Foundation Apache CloudStack