Zstack

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Zstack records in CISA KEV

No Zstack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zstack 2 records LOW Rest Api 1 record MEDIUM

Records

1 record in Rest Api · all components

TI-2021-12494 CVE-2021-32829 · GHSA-3q79-gjf7-rwwf

Post-authentication Remote Code Execution (RCE) in ZStack REST API

MEDIUM 48

ZStack is open source IaaS(infrastructure as a service) software aiming to automate datacenters, managing resources of compute, storage, and networking all by APIs.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02902 Published 2021-08-17 Fixed in 3.8.21, 3.10.8 +1 CWE-94

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0