PUBLISHED
2026-08-21 09:16
MODIFIED
2026-08-21 09:16
EPSS (Prob. Exploit)
0.57%
Top 54.1%
> DESCRIPTION
Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password functionality.
This issue affects Apache CloudStack: from 4.15.1.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0.
Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-116: Improper Encoding or Escaping of Output - The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI
AFFECTED PACKAGES:
Unknown / Unknown
3 versions affected
> HISTORIQUE DES MODIFICATIONS
Première apparition
21/08/2026 09:16
Source: NVD
📊
ENRICHISSEMENT
01/09/2026 06:02
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-116: Improper Encoding or Escaping of Output - The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done in...
Total des modifications: 1
Dernière mise à jour: 1 month ago