zstack records

3 published records for vendor zstack.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2021-32829No exploit	Post-authentication Remote Code Execution (RCE) in ZStack REST APIzstack · rest api · CWE-94 RCE	Critical9.9	—	2.9%	Aug 17, 2021
35Monitor	CVE-2023-46326No exploit	ZStack Cloud version 3.10.38 and before allows unauthenticated API access to the list of active job UUIDs and the session ID for each of thezstack · zstack · CWE-613	High8.8	—	0.7%	Nov 30, 2023
33Monitor	CVE-2021-32836No exploit	Pre-auth unsafe deserialization in ZStackzstack · zstack · CWE-94 pre-auth RCE Deserialization	High8.1	—	2.0%	Sep 8, 2021

CVE-2021-32829
40Plan
Post-authentication Remote Code Execution (RCE) in ZStack REST API
CriticalCVSS 9.9No exploitEPSS 3%
- RCE
zstack · rest apiAug 17, 2021
CVE-2023-46326
35Monitor
ZStack Cloud version 3.10.38 and before allows unauthenticated API access to the list of active job UUIDs and the session ID for each of the
HighCVSS 8.8No exploitEPSS 1%
zstack · zstackNov 30, 2023
CVE-2021-32836
33Monitor
Pre-auth unsafe deserialization in ZStack
HighCVSS 8.1No exploitEPSS 2%
- pre-auth RCE
- Deserialization
zstack · zstackSep 8, 2021