cfme-amazon-smartstate vulnerabilities (Red Hat)

38 vulnerabilities.

• cfme-amazon-smartstate Red Hat Red Hat Security Advisory: CloudForms 5.0.10 security, bug fix and enhancement update CVE-2020-25716 Fix available 8.1 HighJune 7, 2021
• cfme-amazon-smartstate Red Hat A flaw was found in the CloudForms management engine version 5.10 and CloudForms management... CVE-2019-14894 Fix available 8.0 HighJune 22, 2020
• cfme-amazon-smartstate Red Hat Possible Information Leak / Session Hijack Vulnerability in Rack CVE-2019-16782 Fix available 6.3 MediumDecember 18, 2019
• cfme-amazon-smartstate Red Hat cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A... CVE-2018-10854 6.5 MediumNovember 22, 2019
• cfme-amazon-smartstate Red Hat Rubyzip denial of service CVE-2019-16892 Fix available 5.5 MediumSeptember 25, 2019
• cfme-amazon-smartstate Red Hat cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to... CVE-2019-10159 Fix available 4.3 MediumJune 14, 2019
• cfme-amazon-smartstate Red Hat bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point.... CVE-2019-12439 Fix available 7.4 HighMay 29, 2019
• cfme-amazon-smartstate Red Hat Withdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton CVE-2019-0223 Fix available 7.4 HighApril 23, 2019
• cfme-amazon-smartstate Red Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• cfme-amazon-smartstate Red Hat When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed... CVE-2019-3869 7.2 HighMarch 28, 2019
• cfme-amazon-smartstate Red Hat RubyGems Escape sequence injection in errors CVE-2019-8325 Fix available 7.5 HighMarch 27, 2019
• cfme-amazon-smartstate Red Hat Code injection in RubyGems CVE-2019-8324 Fix available 8.8 HighMarch 27, 2019
• cfme-amazon-smartstate Red Hat RubyGems Escape sequence injection vulnerability in api response handling CVE-2019-8323 Fix available 7.5 HighMarch 27, 2019
• cfme-amazon-smartstate Red Hat RubyGems Escape sequence injection vulnerability in gem owner CVE-2019-8322 Fix available 7.5 HighMarch 27, 2019
• cfme-amazon-smartstate Red Hat RubyGems Escape sequence injection vulnerability in verbose CVE-2019-8321 Fix available 7.5 HighMarch 27, 2019
• cfme-amazon-smartstate Red Hat RubyGems Delete directory using symlink when decompressing tar CVE-2019-8320 Fix available 7.4 HighMarch 27, 2019
• cfme-amazon-smartstate Red Hat Path Traversal in Action View CVE-2019-5418 In KEVPublic exploitFix available EPSS 98.5% 7.5 HighMarch 13, 2019
• cfme-amazon-smartstate Red Hat Denial of Service Vulnerability in Action View CVE-2019-5419 Fix available 7.5 HighMarch 13, 2019
• cfme-amazon-smartstate Red Hat Bootstrap Cross-site Scripting vulnerability CVE-2016-10735 Public exploitFix available 6.1 MediumJanuary 9, 2019
• cfme-amazon-smartstate Red Hat Improper Access Control in activejob CVE-2018-16476 Fix available 7.5 HighNovember 30, 2018
• cfme-amazon-smartstate Red Hat It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed... CVE-2018-10925 Fix available 7.1 HighAugust 9, 2018
• cfme-amazon-smartstate Red Hat A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to... CVE-2018-10915 Fix available 8.5 HighAugust 9, 2018
• cfme-amazon-smartstate Red Hat A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the... CVE-2017-15125 6.5 MediumJuly 27, 2018
• cfme-amazon-smartstate Red Hat CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby... CVE-2018-10905 7.8 HighJuly 24, 2018
• cfme-amazon-smartstate Red Hat Ansible exposes sensitive data in log files and on the terminal CVE-2018-10855 Fix available 5.9 MediumJuly 1, 2018
• cfme-amazon-smartstate Red Hat Rubyzip gem contains a Directory Traversal vulnerability in zip file component CVE-2018-1000544 Fix available 9.8 CriticalJune 26, 2018
• cfme-amazon-smartstate Red Hat Sprockets path traversal leads to information leak CVE-2018-3760 Public exploitFix available EPSS 26.3% 7.5 HighJune 20, 2018
• cfme-amazon-smartstate Red Hat Sinatra Cross-site Scripting vulnerability CVE-2018-11627 Fix available 6.1 MediumMay 31, 2018
• cfme-amazon-smartstate Red Hat Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to... CVE-2018-1104 8.8 HighMay 2, 2018
• cfme-amazon-smartstate Red Hat Ansible Tower before version 3.2.4 has a flaw in the management of system and organization... CVE-2018-1101 7.2 HighMay 2, 2018
• cfme-amazon-smartstate Red Hat rails-html-sanitizer Cross-site Scripting vulnerability CVE-2018-3741 Fix available 6.1 MediumMarch 30, 2018
• cfme-amazon-smartstate Red Hat Cross-site Scripting in loofah CVE-2018-8048 Fix available 6.1 MediumMarch 21, 2018
• cfme-amazon-smartstate Red Hat Paramiko not properly checking authentication before processing other requests CVE-2018-7750 Public exploitFix available EPSS 27.1% 9.8 CriticalMarch 13, 2018
• cfme-amazon-smartstate Red Hat A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other... CVE-2018-1058 Public exploitFix available EPSS 13.1% 8.8 HighFebruary 28, 2018
• cfme-amazon-smartstate Red Hat In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7... CVE-2018-1053 Fix available 7.0 HighFebruary 7, 2018
• cfme-amazon-smartstate Red Hat The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA... CVE-2017-1000385 Fix available EPSS 22.1% 5.9 MediumDecember 8, 2017
• cfme-amazon-smartstate Red Hat Nokogiri is vulnerable to XML External Entity (XXE) attack CVE-2012-6685 Fix available 7.5 HighMay 27, 2015
• cfme-amazon-smartstate Red Hat i18n gem Cross-site Scripting vulnerability CVE-2013-4492 Fix available 4.3 MediumDecember 7, 2013