{"id":"CVE-2016-5383","aliases":["EUVD-2016-6333","GHSA-8vfr-r3m3-8998","RHSA-2016:1634"],"status":"published","title":"The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code...","description":"The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving \"Lack of field filters.\"","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02626,"percentile":0.85581,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2016-08-26T14:00:00Z","modified":"2026-06-27T10:04:44Z","fixes":[{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme","fixed_in":["0:5.6.1.2-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance","fixed_in":["0:5.6.1.2-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance-debuginfo","fixed_in":["0:5.6.1.2-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-debuginfo","fixed_in":["0:5.6.1.2-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-gemset","fixed_in":["0:5.6.1.2-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"google-compute-engine","fixed_in":["0:2.0.0-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"google-config","fixed_in":["0:2.0.0-1.el7cf"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.1.2-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.1.2-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.1.2-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.1.2-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.1.2-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"google-compute-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"google-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-1.el7cf"}]}]}],"products":[{"vendor":"redhat","product":"cloudforms"}],"references":[{"url":"http://www.securityfocus.com/bid/92585","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1634.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5383","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8vfr-r3m3-8998"},{"url":"https://access.redhat.com/errata/RHSA-2016:1634","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en/red-hat-cloudforms/4.1/release-notes/release-notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1240443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1255389","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1284084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1295523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341668","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348651","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349060","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349988","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350594","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352134","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353302","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353651","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1360330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1360364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1360384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1360772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1360901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362181","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366360","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1634.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5383","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5383","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2016-5383","description":"The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving \"Lack of field filters.\"","status":"published","published":"2016-08-26T14:00:00Z","modified":"2024-08-06T01:01:00.073Z","updated_at":"2026-11-02T14:33:30.767029Z"}],"euvd":[{"id":"EUVD-2016-6333","description":"The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving \"Lack of field filters.\"","status":"published","published":"2016-08-26T14:00:00Z","modified":"2024-08-06T01:01:00Z","updated_at":"2026-11-03T02:22:42.442421Z"}],"ghsa":[{"id":"GHSA-8vfr-r3m3-8998","title":"The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code...","description":"The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving \"Lack of field filters.\"","status":"published","published":"2022-05-17T03:49:36Z","modified":"2023-01-27T05:09:18Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:43:22.211542Z"}],"nvd":[{"id":"CVE-2016-5383","description":"The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving \"Lack of field filters.\"","status":"published","published":"2016-08-26T14:59:02.277Z","modified":"2026-06-17T00:49:18.197Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:28.854267Z"}],"osv":[{"id":"RHSA-2016:1634","title":"Red Hat Security Advisory: CFME 5.6.1 security, bug fix, and enhancement update","status":"published","published":"2024-09-15T23:33:13Z","modified":"2026-06-27T10:04:44Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"}]}}