Zstack

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Zstack records in CISA KEV

No Zstack vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Zstack · all components

TI-2023-24935 CVE-2023-46326

LOW 39

ZStack Cloud version 3.10.38 and before allows unauthenticated API access to the list of active job UUIDs and the session ID for each of these.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00726 Published 2023-11-30 No fix listed CWE-613

TI-2021-12501 CVE-2021-32836 · GHSA-gpj5-98pq-4552

LOW 39

ZStack is open source IaaS(infrastructure as a service) software.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02036 Published 2021-09-09 Fixed in 3.10.12, 4.1.6 CWE-94