CVE-2012-4501: Apache Cloudstack

High severity, CVSS 10.0. EPSS: 7.8% chance of exploitation in the next 30 days.

Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs.

Affected products

• Apache Cloudstack: affected versions not specified
• Citrix Cloudstack: affected versions not specified

Published 2012-10-26. Last modified 2026-06-16.