Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2015-3252

Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by connecting to the VNC server.

  • Published: Feb 8, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-3252
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
apache / cloudstack - 4.5.1.x