apache_cloudstack vulnerabilities

CVEs whose affected-version data names the apache_cloudstack package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-59302Medium· 4.7

11mo ago

Apache CloudStack: Potential remote code execution on Javascript engine defined rules

In Apache CloudStack improper control of generation of code ('Code Injection') vulnerability is found in the following APIs which are accessible only to admins. * quotaTariffCreate * quotaTariffUpdate * createSecondaryStorageS…

▾ SunlitApache Software Foundation · Apache CloudStackEPSS 0.49%via CVEORG