GCVE - cpe:2.3:a:apache:cloudstack:4.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:cloudstack:4.1.1:*:*:*:*:*:*:*

part: a version: 4.1.1 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Cloudstack (`b1f1c88b-9fea-59c1-bac5-7ae65864e2ab`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/cloudstack`	purl2cpe	2026-06-01 10:14:29.567202
`pkg:github/apache/cloudstack`	purl2cpe	2026-06-01 10:14:29.567203
`pkg:maven/org.apache.jclouds.api/cloudstack`	purl2cpe	2026-06-01 10:14:29.567205

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0031`	vulnerable	2026-06-08 05:05:10.822676	Details available The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request. Published: 2014-01-14T18:00:00.000Z Updated: 2024-08-06T08:58:26.568Z Open on db.gcve.eu Reference links http://secunia.com/advisories/55960 https://blogs.apache.org/cloudstack/entry/cve_2014_0031_cloudstack_listnetworkacl https://issues.apache.org/jira/browse/CLOUDSTACK-5145	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6398`	vulnerable	2026-06-08 05:04:56.462944	Details available The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request. Published: 2014-01-14T18:00:00.000Z Updated: 2024-08-06T17:39:01.164Z Open on db.gcve.eu Reference links http://secunia.com/advisories/60284 http://secunia.com/advisories/55960 https://issues.apache.org/jira/browse/CLOUDSTACK-5263 https://blogs.apache.org/cloudstack/entry/cve_2013_6398_cloudstack_virtual http://www.securityfocus.com/bid/69432	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4317`	vulnerable	2026-06-08 05:04:35.436276	Details available In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-administrative user, the user is able to see information for accounts other than their own. Published: 2018-02-06T14:00:00.000Z Updated: 2024-09-17T01:36:03.050Z Open on db.gcve.eu Reference links http://seclists.org/oss-sec/2018/q1/1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.