Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 41 MIN AGO
T-41M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-61399
Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Lock User Function in UI
Unrated
PUBLISHED
CNA: apache
Base score
Unrated
No CVSS vector published
View raw JSON
CVE Program record
02
Description
CNA: apache
Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Lock User Function in UI
03
Metadata
SCHEMA: 5.2
Published
2026-08-21 08:25Z
17 HR AGO
Last updated
2026-08-21 08:25Z
17 HR AGO
Reserved
2026-07-09
Assigning CNA
apache
Record state
PUBLISHED
Severity
Unrated: no CVSS score published
CVSS vector
Not published
Weaknesses
CWE-116
Improper Encoding or Escaping of Output
Class
SSVC decision
No CISA-ADP assessment
Data version
5.2
Document digest
a9e3fb515b975d5052b9cecc6dbbfc16a8ee40afdccd1c84256de17566a9064e
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
Apache Software Foundation
Apache CloudStack
4.20.0.0 to 4.20.3.0, 4.21.0.0 to 4.22.1.0
—
05
References
REFS: 1
lists.apache.org
https://lists.apache.org/thread/g6cwddtjrwbh1d56wjz4cfp3fzfm4kbc
vendor-advisory