Eucalyptus vulnerabilities, page 2
25 vulnerabilities
Known vulnerabilities in Eucalyptus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
HighCVE-2012-3240eucalyptuseucalyptus eucalyptusThe Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request.EPSS2.41%HighCVE-2012-3241eucalyptuseucalyptus eucalyptusThe VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands.EPSS1.56%MediumCVE-2011-0730canonical · ubuntu_linux +1 morecanonical ubuntu_linuxEucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.EPSS2.17%HighCVE-2010-3905eucalyptuseucalyptus eucalyptusThe password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.EPSS2.86%MediumCVE-2017-7999eucalyptuseucalyptus eucalyptusAtlassian Eucalyptus before 4.4.1, when in EDGE mode, allows remote authenticated users with certain privileges to cause a denial of service (E2 service outage) via unspecified vectors.EPSS1.02%