GCVE - cpe:2.3:a:eucalyptus:eucalyptus:1.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:eucalyptus:eucalyptus:1.4:*:*:*:*:*:*:*

part: a version: 1.4 update: *

Vendor	Eucalyptus (`209e9eb7-77d4-5657-ba62-5a3c541b3346`)
Product	Eucalyptus (`c3c50bc9-04dd-57e5-8fad-4735be372cba`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/eucalyptus/eucalyptus`	purl2cpe	2026-06-01 10:13:31.047430

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4766`	vulnerable	2026-06-08 05:04:49.606593	Details available The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component. Published: 2013-09-17T01:00:00.000Z Updated: 2024-09-16T22:34:57.146Z Open on db.gcve.eu Reference links http://www.eucalyptus.com/resources/security/advisories/esa-13	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2296`	vulnerable	2026-06-08 05:04:24.390821	Details available Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersioningStatus bucket operations, which allows remote authenticated users to bypass intended restrictions on (1) modifying the logging setting, (2) modifying the versioning setting, or (3) accessing activity logs via a request. Published: 2013-09-17T01:00:00.000Z Updated: 2024-09-17T03:13:29.698Z Open on db.gcve.eu Reference links https://eucalyptus.atlassian.net/browse/EUCA-3074 http://www.eucalyptus.com/resources/security/advisories/esa-10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4067`	vulnerable	2026-06-08 05:02:15.804027	Details available Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request. Published: 2013-09-17T01:00:00.000Z Updated: 2024-09-16T16:58:30.412Z Open on db.gcve.eu Reference links https://eucalyptus.atlassian.net/browse/EUCA-5277 http://www.eucalyptus.com/resources/security/advisories/esa-09	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4066`	vulnerable	2026-06-08 05:02:15.797811	Details available The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots. Published: 2013-03-08T18:00:00.000Z Updated: 2024-09-16T17:14:53.673Z Open on db.gcve.eu Reference links http://www.eucalyptus.com/eucalyptus-cloud/security/esa-08	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4065`	vulnerable	2026-06-08 05:02:15.797208	Details available Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a (1) Cloud Controller or (2) Walrus service via a crafted message, as demonstrated by changes to a volume, snapshot, or cloud configuration setting. Published: 2012-10-01T23:00:00.000Z Updated: 2024-09-17T04:09:24.913Z Open on db.gcve.eu Reference links http://www.eucalyptus.com/eucalyptus-cloud/security/esa-07	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4064`	vulnerable	2026-06-08 05:02:15.796554	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4063`	vulnerable	2026-06-08 05:02:15.789943	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.