İçeriğe atla
Noroxi

eucalyptus kayıtları

eucalyptus üreticisine ait 25 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

25 kayıt
  • CVE-2013-4767
    40Planlayın

    Unspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors.

    KritikCVSS 10,0İstismar yokEPSS %1

    eucalyptus · eucalyptus9 Eki 2013

  • CVE-2014-5039
    38İzleyin

    Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.2 allows remote attackers to inject arbitra

    KritikCVSS 9,6İstismar yokEPSS %1

    eucalyptus · eucalyptus management console31 Oca 2020

  • CVE-2016-8528
    36İzleyin

    A Remote Escalation of Privilege vulnerability in HPE Helion Eucalyptus version 3.3.0 through 4.3.1 was found.

    YüksekCVSS 8,8İstismar yokEPSS %2

    eucalyptus · eucalyptus15 Şub 2018

  • CVE-2016-8520
    35İzleyin

    HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs.

    YüksekCVSS 8,8İstismar yokEPSS %1

    eucalyptus · eucalyptus15 Şub 2018

  • CVE-2010-3905
    31İzleyin

    The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remot

    YüksekCVSS 7,5İstismar yokEPSS %2

    eucalyptus · eucalyptus22 Ara 2010

  • CVE-2012-3240
    31İzleyin

    The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST re

    YüksekCVSS 7,5İstismar yokEPSS %2

    eucalyptus · eucalyptus17 Tem 2012

  • CVE-2012-3241
    30İzleyin

    The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to

    YüksekCVSS 7,5İstismar yokEPSS %1

    eucalyptus · eucalyptus17 Tem 2012

  • CVE-2015-6861
    30İzleyin

    HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assu

    YüksekCVSS 7,5İstismar yokEPSS %1

    eucalyptus · eucalyptus5 Oca 2016

  • CVE-2011-0730
    27İzleyin

    Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpr

    OrtaCVSS 6,5İstismar yokEPSS %2

    eucalyptus · eucalyptus2 Haz 2011

  • CVE-2014-5040
    27İzleyin

    HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended acc

    OrtaCVSS 6,8İstismar yokEPSS %0

    eucalyptus · eucalyptus4 Oca 2016

  • CVE-2013-2297
    27İzleyin

    Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 2425352071, and EMI 134711

    OrtaCVSS 6,9İstismar yokEPSS %0

    eucalyptus · eustore17 Eyl 2013

  • CVE-2012-4064
    26İzleyin

    Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated use

    OrtaCVSS 6,5İstismar yokEPSS %1

    eucalyptus · eucalyptus1 Eki 2012

  • CVE-2017-7999
    26İzleyin

    Atlassian Eucalyptus before 4.4.1, when in EDGE mode, allows remote authenticated users with certain privileges to cause a denial of service

    OrtaCVSS 6,5İstismar yokEPSS %1

    eucalyptus · eucalyptus1 Haz 2017

  • CVE-2013-4770
    24İzleyin

    Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.1 allows remote attackers to inject arbitra

    OrtaCVSS 6,1İstismar yokEPSS %0

    eucalyptus · eucalyptus management console27 Oca 2020

  • CVE-2013-2296
    22İzleyin

    Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersion

    OrtaCVSS 5,5İstismar yokEPSS %1

    eucalyptus · eucalyptus17 Eyl 2013

  • CVE-2012-4063
    21İzleyin

    The Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying XML Signature transforms to documents, whi

    OrtaCVSS 5,0İstismar yokEPSS %1

    eucalyptus · eucalyptus1 Eki 2012

  • CVE-2013-4768
    20İzleyin

    The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "networ

    OrtaCVSS 5,0İstismar yokEPSS %1

    eucalyptus · eucalyptus15 Nis 2014

  • CVE-2012-4066
    20İzleyin

    The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which

    OrtaCVSS 5,0İstismar yokEPSS %1

    eucalyptus · eucalyptus8 Mar 2013

  • CVE-2012-4067
    17İzleyin

    Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted X

    OrtaCVSS 4,3İstismar yokEPSS %1

    eucalyptus · eucalyptus17 Eyl 2013

  • CVE-2013-4769
    17İzleyin

    The cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns.recursive.enabled setting is used, allows

    OrtaCVSS 4,3İstismar yokEPSS %1

    eucalyptus · eucalyptus26 Ara 2014

  • CVE-2013-4766
    17İzleyin

    The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Co

    OrtaCVSS 4,3İstismar yokEPSS %1

    eucalyptus · eucalyptus17 Eyl 2013

  • CVE-2012-4065
    14İzleyin

    Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated use

    DüşükCVSS 3,5İstismar yokEPSS %0

    eucalyptus · eucalyptus1 Eki 2012

  • CVE-2014-5038
    8İzleyin

    Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obt

    DüşükCVSS 2,1İstismar yokEPSS %0

    eucalyptus · eucalyptus7 Kas 2014

  • CVE-2014-5037
    8İzleyin

    Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensit

    DüşükCVSS 2,1İstismar yokEPSS %0

    eucalyptus · eucalyptus7 Kas 2014

  • CVE-2014-5036
    7İzleyin

    The Storage Controller (SC) component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user c

    DüşükCVSS 1,9İstismar yokEPSS %0

    eucalyptus · eucalyptus5 Eyl 2014