Vendors / Zstack Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Zstack records in CISA KEV No Zstack vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
ZStack is open source IaaS(infrastructure as a service) software aiming to automate datacenters, managing resources of compute, storage, and networking all by APIs.
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.02902 · Published 2021-08-17 · Fixed in 3.8.21, 3.10.8 +1 CWE-94
Priority LOW 39
ZStack Cloud version 3.10.38 and before allows unauthenticated API access to the list of active job UUIDs and the session ID for each of these.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00726 · Published 2023-11-30 · No fix listed CWE-613
Priority LOW 39
ZStack is open source IaaS(infrastructure as a service) software.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.02036 · Published 2021-09-09 · Fixed in 3.10.12, 4.1.6 CWE-94
Open these records in search → All records by CVSS severity
1 2 0 0 0
