ovirt-engine-restapi vulnerabilities (Red Hat)

49 vulnerabilities.

• ovirt-engine-restapi Red Hat Ovirt: authentication bypass CVE-2024-0822 Fix available 7.5 HighJanuary 25, 2024
• ovirt-engine-restapi Red Hat TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc CVE-2022-41946 Fix available 4.7 MediumNovember 23, 2022
• ovirt-engine-restapi Red Hat A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log... CVE-2022-2805 6.5 MediumOctober 19, 2022
• ovirt-engine-restapi Red Hat sosreport Exposure of Sensitive Information vulnerability CVE-2022-2806 Fix available 5.5 MediumSeptember 1, 2022
• ovirt-engine-restapi Red Hat Inefficient Regular Expression Complexity in moment CVE-2022-31129 Fix available 7.5 HighJuly 6, 2022
• ovirt-engine-restapi Red Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• ovirt-engine-restapi Red Hat SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• ovirt-engine-restapi Red Hat Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• ovirt-engine-restapi Red Hat Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects CVE-2022-0155 Public exploitFix available 8.0 HighJanuary 10, 2022
• ovirt-engine-restapi Red Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• ovirt-engine-restapi Red Hat Improper Output Neutralization for Logs in Spring Framework CVE-2021-22096 Fix available 4.3 MediumOctober 28, 2021
• ovirt-engine-restapi Red Hat XSS in the `of` option of the `.position()` util CVE-2021-41184 Public exploitFix available EPSS 40.8% 6.5 MediumOctober 26, 2021
• ovirt-engine-restapi Red Hat XSS in `*Text` options of the Datepicker widget CVE-2021-41183 Fix available 6.5 MediumOctober 26, 2021
• ovirt-engine-restapi Red Hat XSS in the `altField` option of the Datepicker widget CVE-2021-41182 Public exploitFix available EPSS 39.4% 6.5 MediumOctober 26, 2021
• ovirt-engine-restapi Red Hat Inefficient Regular Expression Complexity in chalk/ansi-regex CVE-2021-3807 Fix available 7.5 HighSeptember 17, 2021
• ovirt-engine-restapi Red Hat Regular Expression Denial of Service (ReDoS) CVE-2021-23425 Fix available 5.3 MediumAugust 18, 2021
• ovirt-engine-restapi Red Hat ReDoS in normalize-url CVE-2021-33502 Fix available 7.5 HighMay 24, 2021
• ovirt-engine-restapi Red Hat Arbitrary Code Injection CVE-2021-23358 Public exploitFix available 3.3 LowMarch 29, 2021
• ovirt-engine-restapi Red Hat Prototype Pollution CVE-2020-28477 Fix available 7.5 HighJanuary 19, 2021
• ovirt-engine-restapi Red Hat A flaw was found in all released versions of m2crypto, where they are vulnerable to... CVE-2020-25657 Fix available 5.9 MediumJanuary 12, 2021
• ovirt-engine-restapi Red Hat A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other... CVE-2020-35497 Fix available 6.5 MediumDecember 21, 2020
• ovirt-engine-restapi Red Hat Prototype Pollution CVE-2020-28458 Public exploitFix available 7.3 HighDecember 16, 2020
• ovirt-engine-restapi Red Hat XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• ovirt-engine-restapi Red Hat Regular Expression Denial of Service in Handlebars CVE-2019-20922 Fix available 7.5 HighSeptember 30, 2020
• ovirt-engine-restapi Red Hat Cross-site scripting in bootstrap-select CVE-2019-20921 Fix available 6.1 MediumSeptember 3, 2020
• ovirt-engine-restapi Red Hat An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it... CVE-2020-10775 5.3 MediumAugust 24, 2020
• ovirt-engine-restapi Red Hat A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not... CVE-2020-14333 6.3 MediumAugust 18, 2020
• ovirt-engine-restapi Red Hat Prototype Pollution in lodash CVE-2020-8203 Public exploitFix available 7.4 HighJuly 15, 2020
• ovirt-engine-restapi Red Hat Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• ovirt-engine-restapi Red Hat jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• ovirt-engine-restapi Red Hat A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization... CVE-2019-19336 Fix available 5.4 MediumMarch 19, 2020
• ovirt-engine-restapi Red Hat Prototype Pollution in minimist CVE-2020-7598 Public exploitFix available 5.6 MediumMarch 11, 2020
• ovirt-engine-restapi Red Hat A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub... CVE-2020-1720 Fix available 3.1 LowFebruary 13, 2020
• ovirt-engine-restapi Red Hat Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT CVE-2019-17195 Public exploitFix available EPSS 11.1% 9.8 CriticalOctober 15, 2019
• ovirt-engine-restapi Red Hat Cross-Site Scripting in @novnc/novnc CVE-2017-18635 Public exploitFix available 6.1 MediumSeptember 25, 2019
• ovirt-engine-restapi Red Hat Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• ovirt-engine-restapi Red Hat XML external entity injection in Terracotta Quartz Scheduler CVE-2019-13990 Public exploitFix available EPSS 16.6% 9.8 CriticalJuly 26, 2019
• ovirt-engine-restapi Red Hat Arbitrary Code Execution in handlebars CVE-2019-20920 Fix available 8.1 HighJune 5, 2019
• ovirt-engine-restapi Red Hat It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is... CVE-2019-3879 Fix available 6.5 MediumMarch 25, 2019
• ovirt-engine-restapi Red Hat In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be... CVE-2017-7510 Fix available 8.8 HighMarch 25, 2019
• ovirt-engine-restapi Red Hat Bootstrap Vulnerable to Cross-Site Scripting CVE-2019-8331 Public exploitFix available EPSS 16.4% 6.1 MediumFebruary 20, 2019
• ovirt-engine-restapi Red Hat ovirt-engine Logs Plaintext Passwords To File CVE-2017-15113 Fix available 7.2 HighJuly 27, 2018
• ovirt-engine-restapi Red Hat ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log... CVE-2018-1072 5.0 MediumJune 26, 2018
• ovirt-engine-restapi Red Hat ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db... CVE-2018-1075 5.0 MediumJune 12, 2018
• ovirt-engine-restapi Red Hat linux-4.9 - security update CVE-2018-3639 Public exploitFix available EPSS 60.4% 5.5 MediumMay 21, 2018
• ovirt-engine-restapi Red Hat ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to... CVE-2018-1074 Fix available 7.7 HighApril 26, 2018
• ovirt-engine-restapi Red Hat A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable... CVE-2018-1062 Fix available 5.3 MediumMarch 6, 2018
• ovirt-engine-restapi Red Hat ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for... CVE-2016-6338 Fix available 6.8 MediumApril 20, 2017
• ovirt-engine-restapi Red Hat The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0... CVE-2016-5432 Fix available 3.3 LowOctober 3, 2016