{"id":"CVE-2016-7040","aliases":["EUVD-2016-7923","GHSA-7fr4-2q4f-xgw5","RHSA-2016:1996"],"status":"published","title":"Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to...","description":"Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02256,"percentile":0.83069,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2016-10-07T14:00:00Z","modified":"2026-06-27T10:04:48Z","fixes":[{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme","fixed_in":["0:5.6.2.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance","fixed_in":["0:5.6.2.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance-debuginfo","fixed_in":["0:5.6.2.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-debuginfo","fixed_in":["0:5.6.2.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-gemset","fixed_in":["0:5.6.2.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-nokogiri","fixed_in":["0:1.6.8-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-nokogiri-debuginfo","fixed_in":["0:1.6.8-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-pkg-config","fixed_in":["0:1.1.7-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-pkg-config-doc","fixed_in":["0:1.1.7-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-thin","fixed_in":["0:1.7.0-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-thin-debuginfo","fixed_in":["0:1.7.0-1.el7cf"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-appliance-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.2.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-nokogiri-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-pkg-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.7-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-pkg-config-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.7-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-thin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.6::el7","package":"rh-ruby22-rubygem-thin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-1.el7cf"}]}]}],"products":[{"vendor":"redhat","product":"cloudforms_management_engine"}],"references":[{"url":"http://www.securityfocus.com/bid/93893","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1996.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7040","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7fr4-2q4f-xgw5"},{"url":"https://access.redhat.com/errata/RHSA-2016:1996","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376169","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377420","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370196","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370569","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371668","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376164","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376574","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1996.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7040","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2016-7040","description":"Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections.","status":"published","published":"2016-10-07T14:00:00Z","modified":"2024-08-06T01:50:47.23Z","updated_at":"2026-11-02T14:33:36.483151Z"}],"euvd":[{"id":"EUVD-2016-7923","description":"Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections.","status":"published","published":"2016-10-07T14:00:00Z","modified":"2024-08-06T01:50:47Z","updated_at":"2026-11-03T02:22:34.587517Z"}],"ghsa":[{"id":"GHSA-7fr4-2q4f-xgw5","title":"Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to...","description":"Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections.","status":"published","published":"2022-05-17T03:38:54Z","modified":"2023-01-27T05:08:21Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:43:17.252355Z"}],"nvd":[{"id":"CVE-2016-7040","description":"Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections.","status":"published","published":"2016-10-07T14:59:07.083Z","modified":"2026-06-17T00:52:12.113Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:31.485755Z"}],"osv":[{"id":"RHSA-2016:1996","title":"Red Hat Security Advisory: CFME 4.1 bug fixes and enhancement update","status":"published","published":"2024-09-15T23:41:01Z","modified":"2026-06-27T10:04:48Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"}]}}