CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3252

Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by connecting to the VNC server.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.019

EPSS Ranking 82.3%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 6.0

References

Products affected by CVE-2015-3252

Apache » Cloudstack » Version: 2.0

cpe:2.3:a:apache:cloudstack:2.0
Apache » Cloudstack » Version: 2.0.1

cpe:2.3:a:apache:cloudstack:2.0.1
Apache » Cloudstack » Version: 2.1.0

cpe:2.3:a:apache:cloudstack:2.1.0
Apache » Cloudstack » Version: 2.1.1

cpe:2.3:a:apache:cloudstack:2.1.1
Apache » Cloudstack » Version: 2.1.10

cpe:2.3:a:apache:cloudstack:2.1.10
Apache » Cloudstack » Version: 2.1.2

cpe:2.3:a:apache:cloudstack:2.1.2
Apache » Cloudstack » Version: 2.1.3

cpe:2.3:a:apache:cloudstack:2.1.3
Apache » Cloudstack » Version: 2.1.4

cpe:2.3:a:apache:cloudstack:2.1.4
Apache » Cloudstack » Version: 2.1.5

cpe:2.3:a:apache:cloudstack:2.1.5
Apache » Cloudstack » Version: 2.1.6

cpe:2.3:a:apache:cloudstack:2.1.6
Apache » Cloudstack » Version: 2.1.7

cpe:2.3:a:apache:cloudstack:2.1.7
Apache » Cloudstack » Version: 2.1.8

cpe:2.3:a:apache:cloudstack:2.1.8
Apache » Cloudstack » Version: 2.1.9

cpe:2.3:a:apache:cloudstack:2.1.9
Apache » Cloudstack » Version: 2.2.0

cpe:2.3:a:apache:cloudstack:2.2.0
Apache » Cloudstack » Version: 2.2.1

cpe:2.3:a:apache:cloudstack:2.2.1
Apache » Cloudstack » Version: 2.2.11

cpe:2.3:a:apache:cloudstack:2.2.11
Apache » Cloudstack » Version: 2.2.12

cpe:2.3:a:apache:cloudstack:2.2.12
Apache » Cloudstack » Version: 2.2.13

cpe:2.3:a:apache:cloudstack:2.2.13
Apache » Cloudstack » Version: 2.2.14

cpe:2.3:a:apache:cloudstack:2.2.14
Apache » Cloudstack » Version: 2.2.2

cpe:2.3:a:apache:cloudstack:2.2.2
Apache » Cloudstack » Version: 2.2.3

cpe:2.3:a:apache:cloudstack:2.2.3
Apache » Cloudstack » Version: 2.2.5

cpe:2.3:a:apache:cloudstack:2.2.5
Apache » Cloudstack » Version: 2.2.6

cpe:2.3:a:apache:cloudstack:2.2.6
Apache » Cloudstack » Version: 2.2.7

cpe:2.3:a:apache:cloudstack:2.2.7
Apache » Cloudstack » Version: 2.2.8

cpe:2.3:a:apache:cloudstack:2.2.8
Apache » Cloudstack » Version: 2.2.9

cpe:2.3:a:apache:cloudstack:2.2.9
Apache » Cloudstack » Version: 3.0.0

cpe:2.3:a:apache:cloudstack:3.0.0
Apache » Cloudstack » Version: 3.0.1

cpe:2.3:a:apache:cloudstack:3.0.1
Apache » Cloudstack » Version: 3.0.2

cpe:2.3:a:apache:cloudstack:3.0.2
Apache » Cloudstack » Version: 4.0.0

cpe:2.3:a:apache:cloudstack:4.0.0
Apache » Cloudstack » Version: 4.0.1

cpe:2.3:a:apache:cloudstack:4.0.1
Apache » Cloudstack » Version: 4.0.2

cpe:2.3:a:apache:cloudstack:4.0.2
Apache » Cloudstack » Version: 4.1.0

cpe:2.3:a:apache:cloudstack:4.1.0
Apache » Cloudstack » Version: 4.1.1

cpe:2.3:a:apache:cloudstack:4.1.1
Apache » Cloudstack » Version: 4.2.0

cpe:2.3:a:apache:cloudstack:4.2.0
Apache » Cloudstack » Version: 4.2.1

cpe:2.3:a:apache:cloudstack:4.2.1
Apache » Cloudstack » Version: 4.3.0

cpe:2.3:a:apache:cloudstack:4.3.0
Apache » Cloudstack » Version: 4.3.1

cpe:2.3:a:apache:cloudstack:4.3.1
Apache » Cloudstack » Version: 4.3.2

cpe:2.3:a:apache:cloudstack:4.3.2
Apache » Cloudstack » Version: 4.4.0

cpe:2.3:a:apache:cloudstack:4.4.0
Apache » Cloudstack » Version: 4.4.1

cpe:2.3:a:apache:cloudstack:4.4.1
Apache » Cloudstack » Version: 4.4.2

cpe:2.3:a:apache:cloudstack:4.4.2
Apache » Cloudstack » Version: 4.4.3

cpe:2.3:a:apache:cloudstack:4.4.3
Apache » Cloudstack » Version: 4.4.4

cpe:2.3:a:apache:cloudstack:4.4.4
Apache » Cloudstack » Version: 4.5.0

cpe:2.3:a:apache:cloudstack:4.5.0
Apache » Cloudstack » Version: 4.5.1

cpe:2.3:a:apache:cloudstack:4.5.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3252

Products

Pricing

Contact Us