CVE Intelligence

Opennebula vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Opennebula products: 4 record(s), with severity, exploitation and fixes.

Opennebula 4

Exploited only (KEV) →

CVE-2025-56537 Medium · 6.1 CWE-79 Apr 29, 2026
A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0...
A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the virtual network template parameter.
CVE-2025-56536 Medium · 6.1 CWE-79 Apr 29, 2026
A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to...
A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the user information parameter.
CVE-2025-56535 Medium · 6.1 CWE-79 Apr 29, 2026
A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute...
A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the zone attribute parameter.
CVE-2025-56534 Medium · 6.1 CWE-79 Apr 29, 2026
A cross-site scripting (XSS) vulnerability in the custom authenticator driver of opennebula v6.10...
A cross-site scripting (XSS) vulnerability in the custom authenticator driver of opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.