Unrated severityNVD Advisory· Published Aug 19, 2013· Updated Apr 29, 2026
CVE-2013-2136
CVE-2013-2136
Description
Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizard; (2) New network name, (3) instance name, or (4) group to the Instance wizard; (5) unspecified "multi-edit fields;" and (6) unspecified "list view" edit fields related to global settings.
Affected products
33cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:*+ 32 more
- cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:*range: <=4.1.0
- cpe:2.3:a:apache:cloudstack:2.0:-:community:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.11:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.12:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.13:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.14:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:4.0.0:incubating:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:2.2.6:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- secunia.com/advisories/54399nvdVendor Advisory
- archives.neohapsis.com/archives/bugtraq/2013-08/0034.htmlnvd
- archives.neohapsis.com/archives/bugtraq/2013-08/0047.htmlnvd
- osvdb.org/96074nvd
- osvdb.org/96075nvd
- osvdb.org/96076nvd
- osvdb.org/96077nvd
- osvdb.org/96078nvd
- www.securityfocus.com/bid/61638nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/86258nvd
- issues.apache.org/jira/browse/CLOUDSTACK-2936nvd
News mentions
0No linked articles in our index yet.