Red Hat Cloudforms vulnerabilities

• manageiq, red hat cloudforms +1 more YAML safe_load production fallback to unsafe_load enables RCE via deserialization CVE-2026-52903 8.8 HighOctober 12, 2026
• red hat cloudforms, redhat cloudforms management engine +1 more A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL:... CVE-2014-8164 9.1 CriticalJuly 6, 2022
• [unknown] cloudforms, redhat cloudforms management engine +1 more cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A... CVE-2018-10854 6.5 MediumNovember 22, 2019
• manageiq evm evm, red hat cloudforms 3.0, redhat cloudforms +1 more +3 more Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to... CVE-2013-0186 6.1 MediumNovember 1, 2019
• [unknown] cloudforms, redhat cloudforms management engine +1 more A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of... CVE-2019-10177 6.5 MediumJune 27, 2019
• [unknown] cloudforms, redhat cloudforms management engine +1 more A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed... CVE-2017-2653 Fix available 4.1 MediumJuly 27, 2018
• [unknown] cloudforms, redhat cloudforms management engine +1 more A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the... CVE-2017-15125 6.5 MediumJuly 27, 2018
• [unknown] cloudforms, redhat cloudforms management engine +1 more CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on... CVE-2017-2664 Fix available 6.5 MediumJuly 26, 2018
• redhat cloudforms, red hat cloudforms for rhel 6, cloudforms tools for rhel 5 +2 more Grinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions CVE-2012-5605 3.3 LowJanuary 4, 2013
• redhat cloudforms, red hat cloudforms for rhel 6, cloudforms tools for rhel 5 +1 more +3 more Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file CVE-2012-4574 5.5 MediumJanuary 4, 2013