rhevm-extensions-api-impl vulnerabilities (Red Hat)

10 vulnerabilities.

• rhevm-extensions-api-impl Red Hat linux-4.9 - security update CVE-2018-3639 Public exploitFix available EPSS 60.4% 5.5 MediumMay 21, 2018
• rhevm-extensions-api-impl Red Hat oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin,... CVE-2014-7851 Fix available 7.5 HighOctober 16, 2017
• rhevm-extensions-api-impl Red Hat The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated... CVE-2016-3077 Fix available 6.5 MediumJune 6, 2017
• rhevm-extensions-api-impl Red Hat Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys... CVE-2016-4443 Fix available 5.5 MediumDecember 14, 2016
• rhevm-extensions-api-impl Red Hat Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the... CVE-2015-0257 2.1 LowMay 1, 2015
• rhevm-extensions-api-impl Red Hat Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny... CVE-2015-0237 6.8 MediumMay 1, 2015
• rhevm-extensions-api-impl Red Hat oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the... CVE-2014-0154 5.0 MediumFebruary 13, 2015
• rhevm-extensions-api-impl Red Hat Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote... CVE-2014-0151 6.8 MediumFebruary 13, 2015
• rhevm-extensions-api-impl Red Hat Improper certificate validation in org.apache.httpcomponents:httpclient CVE-2012-6153 Fix available 4.3 MediumAugust 25, 2014
• rhevm-extensions-api-impl Red Hat Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient CVE-2014-3577 Fix available 5.8 MediumAugust 21, 2014