Every CVESearch/Get API key

CVE-2014-0176

Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0...

4.3 Medium

CVE-2014-0176 is a medium vulnerability (CVSS 4.3) in Redhat Cloudforms 3.0 Management Engine, published July 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.43%, the 73rd percentile. No source names a fixed version.

What does this mean?
Severity
4.3 MediumCVSS 2.0, NVD
Exploit chance
1.43%EPSS, 73rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Exploit likelihood

1.43%Up 0.4 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cfme
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 7 CVEs
before 0:5.2.4.2-1.el6cf
0:5.2.4.2-1.el6cf
cfme-appliance
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 7 CVEs
before 0:5.2.4.2-1.el6cf
0:5.2.4.2-1.el6cf
cfme-debuginfo
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 7 CVEs
before 0:5.2.4.2-1.el6cf
0:5.2.4.2-1.el6cf
cfme-lib
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 7 CVEs
before 0:5.2.4.2-1.el6cf
0:5.2.4.2-1.el6cf
mingw32-cfme-host
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 7 CVEs
before 0:5.2.4.2-1.el6cf
0:5.2.4.2-1.el6cf
ruby193-rubygem-actionpack
Red Hat:cloudforms_managementengine:5::el6
From an advisory covering 7 CVEs
before 1:3.2.13-8.el6cf
1:3.2.13-8.el6cf

What each source reports

NVD Score used4.3

Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Record
CVE-2014-0176
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE ListNo score

Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Record
CVE-2014-0176
Updated
2026-11-02
EUVDEUVD-2014-0229No score

Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Record
EUVD-2014-0229
Updated
2026-11-03
GitHub AdvisoriesGHSA-x2gf-5x56-cqr6No score

Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0...

Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Record
GHSA-x2gf-5x56-cqr6
Weakness
CWE-79
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 28 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open