Cloudvision Portal
21 CVEs tracked. 1 of them are in CISA KEV.
This hub aggregates every CVE we track for Cloudvision Portal, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
Cloudvision Portal CVEs per month
| Month | CVEs |
|---|---|
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 3 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 1 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
| 2026-10 | 8 |
Severity
How the 21 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical4
- High10
- Medium7
Latest CVEs
The 15 most recently published vulnerabilities affecting Cloudvision Portal.
- CVE-2026-101155Security Advisory 01899.1
- CVE-2026-101154Security Advisory 01897.2
- CVE-2026-101153Security Advisory 01888.0
- CVE-2026-101152Security Advisory 01878.0
- CVE-2026-101151Security Advisory 01874.3
- CVE-2026-101149Security Advisory 01864.1
- CVE-2026-101150Security Advisory 01864.1
- CVE-2026-101158Security Advisory 01858.4
- CVE-2026-31431crypto: algif_aead - Revert to operating out-of-place7.8
- CVE-2024-12378On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.9.1
- CVE-2024-11186On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-prem10.0
- CVE-2025-0505On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state10.0
- CVE-2023-24546On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broade...8.1
- CVE-2022-29071This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ...4.0
- CVE-2020-24333A vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended f...6.5
Product grouping is registry-driven, with AI assist and human review. How it works