Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache CloudStack

51 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.7
    CVE-2026-66721

    Apache CloudStack: Authorization issue with listHostTags for domain admins

    Missing authorization issue for domain admins in CloudStack's host tags listing functionality. Domain Admins, by default, have permission to call the listHostTags API, but the API returns host tags for every host in the environment without domain scoping. It …

    Apache Software Foundation Apache CloudStack
  • Low 2.3
    CVE-2025-22829

    Apache CloudStack: Unauthorised access to dedicated resources in Quota plugin

    The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0. Anyone with authenticated user-account access in CloudStack 4.20.0.0 environments, where this plugin is enabled and have access to specific APIs can enable or disable …

    Apache Software Foundation Apache CloudStack