GCVE - cpe:2.3:a:apache:cloudstack:2.1.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:cloudstack:2.1.6:*:*:*:*:*:*:*

part: a version: 2.1.6 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Cloudstack (`b1f1c88b-9fea-59c1-bac5-7ae65864e2ab`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/cloudstack`	purl2cpe	2026-06-01 10:14:29.567091
`pkg:github/apache/cloudstack`	purl2cpe	2026-06-01 10:14:29.567092
`pkg:maven/org.apache.jclouds.api/cloudstack`	purl2cpe	2026-06-01 10:14:29.567094

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0031`	vulnerable	2026-06-08 05:05:10.810149	Details available The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request. Published: 2014-01-14T18:00:00.000Z Updated: 2024-08-06T08:58:26.568Z Open on db.gcve.eu Reference links http://secunia.com/advisories/55960 https://blogs.apache.org/cloudstack/entry/cve_2014_0031_cloudstack_listnetworkacl https://issues.apache.org/jira/browse/CLOUDSTACK-5145	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6398`	vulnerable	2026-06-08 05:04:56.450555	Details available The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request. Published: 2014-01-14T18:00:00.000Z Updated: 2024-08-06T17:39:01.164Z Open on db.gcve.eu Reference links http://secunia.com/advisories/60284 http://secunia.com/advisories/55960 https://issues.apache.org/jira/browse/CLOUDSTACK-5263 https://blogs.apache.org/cloudstack/entry/cve_2013_6398_cloudstack_virtual http://www.securityfocus.com/bid/69432	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2136`	vulnerable	2026-06-08 05:03:58.549559	Details available Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizard; (2) New network name, (3) instance name, or (4) group to the Instance wizard; (5) unspecified "multi-edit fields;" and (6) unspecified "list view" edit fields related to global settings. Published: 2013-08-19T23:00:00.000Z Updated: 2024-08-06T15:27:40.784Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/86258 http://www.securityfocus.com/bid/61638 http://osvdb.org/96078 http://archives.neohapsis.com/archives/bugtraq/2013-08/0034.html http://archives.neohapsis.com/archives/bugtraq/2013-08/0047.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.