Red Hat Cfme vulnerabilities

• cfme, redhat cloudforms, cloudforms management engine +2 more CFME: CSRF protection vulnerability via permissive check of the referrer header CVE-2014-0197 8.8 HighDecember 13, 2019
• red hat cfme, redhat cfme-gemset, cloudforms +2 more cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to... CVE-2019-10159 Fix available 4.3 MediumJune 14, 2019
• [unknown] cfme, redhat cloudforms, cloudforms management engine +2 more A code injection flaw was found in the way capacity and utilization imported control files are... CVE-2016-5402 Fix available 8.8 HighOctober 31, 2018
• redhat cloudforms, red hat cfme, redhat cloudforms management engine +2 more A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with... CVE-2016-7047 4.3 MediumSeptember 11, 2018
• redhat cloudforms, red hat cfme, redhat cloudforms management engine +2 more It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions... CVE-2016-7071 Fix available 8.8 HighSeptember 10, 2018
• redhat cloudforms, red hat cfme, redhat cloudforms management engine +2 more A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant... CVE-2017-2632 4.9 MediumJuly 27, 2018
• [unknown] cfme, redhat cloudforms management engine +1 more The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud... CVE-2017-7497 4.1 MediumJuly 27, 2018
• red hat cfme, redhat cloudforms, cloudforms management engine +2 more In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that... CVE-2017-7530 8.8 HighJuly 26, 2018
• [unknown] cfme, redhat cloudforms, cloudforms management engine +2 more CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby... CVE-2018-10905 7.8 HighJuly 24, 2018