Redhat Cloudforms vulnerabilities

• red hat cloudforms, redhat cloudforms management engine +1 more A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL:... CVE-2014-8164 9.1 CriticalJuly 6, 2022
• [unknown] cloudforms Red Hat Security Advisory: CloudForms 5.0.10 security, bug fix and enhancement update CVE-2020-25716 Fix available 8.1 HighJune 7, 2021
• [unknown] cloudforms Red Hat Security Advisory: CloudForms 5.0.8 security, bug fix and enhancement update CVE-2020-14369 Fix available 6.3 MediumDecember 2, 2020
• [unknown] cloudforms, redhat cloudforms management engine +1 more Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update CVE-2020-10780 Fix available 6.3 MediumAugust 11, 2020
• [unknown] cloudforms, redhat cloudforms management engine +1 more Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update CVE-2020-14324 Fix available 9.1 CriticalAugust 11, 2020
• [unknown] cloudforms, redhat cloudforms management engine +1 more Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update CVE-2020-14296 Fix available 7.1 HighAugust 11, 2020
• [unknown] cloudforms Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update CVE-2020-14325 Fix available 9.1 CriticalAugust 11, 2020
• [unknown] cloudforms Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update CVE-2020-10779 Fix available 6.5 MediumAugust 11, 2020
• [unknown] cloudforms Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update CVE-2020-10783 Fix available 8.3 HighAugust 11, 2020
• [unknown] cloudforms Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update CVE-2020-10778 Fix available 6.0 MediumAugust 11, 2020
• [unknown] cloudforms Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update CVE-2020-10777 Fix available 5.4 MediumAugust 11, 2020
• [unknown] cloudforms, redhat cloudforms management engine +1 more A flaw was found in the CloudForms management engine version 5.10 and CloudForms management... CVE-2019-14894 Fix available 8.0 HighJune 22, 2020
• red hat ansible, redhat ansible tower, cloudforms management engine +1 more +3 more Argument Injection in Ansible CVE-2020-1738 Fix available 3.9 LowMarch 16, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible CVE-2020-1740 Fix available 3.9 LowMarch 16, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Path Traversal in Ansible CVE-2020-1735 Fix available 4.2 MediumMarch 16, 2020
• red hat ansible, fedoraproject fedora, redhat ansible tower +2 more +4 more Incorrect Permission Assignment for Critical Resource in Ansible CVE-2020-1736 Fix available 2.2 LowMarch 16, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Exposure of Sensitive Information to an Unauthorized Actor in Ansible CVE-2020-1739 Fix available 3.9 LowMarch 12, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File CVE-2020-1733 Fix available 5.0 MediumMarch 11, 2020
• red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 more Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible CVE-2019-14905 Fix available 7.3 HighJanuary 28, 2020
• cfme (cloudforms management engine) (cloudforms management engine), redhat cloudforms management engine +1 more CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during... CVE-2014-3536 5.5 MediumDecember 15, 2019
• cfme, redhat cloudforms, cloudforms management engine +2 more CFME: CSRF protection vulnerability via permissive check of the referrer header CVE-2014-0197 Fix available 8.8 HighDecember 13, 2019
• red hat ansible, debian linux, opensuse backports sle +5 more +7 more Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible CVE-2019-14864 Fix available 5.7 MediumDecember 6, 2019
• [unknown] cloudforms, redhat cloudforms management engine +1 more cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A... CVE-2018-10854 Fix available 6.5 MediumNovember 22, 2019
• nokogiri, ruby nokogiri gem, debian linux +5 more +7 more Nokogiri vulnerable to DoS while parsing XML entities CVE-2013-6461 Fix available 6.5 MediumNovember 5, 2019
• nokogiri, ruby nokogiri gem, debian linux +5 more +7 more Nokogiri vulnerable to DoS while parsing XML documents CVE-2013-6460 Fix available 6.5 MediumNovember 5, 2019
• [unknown] cloudforms CloudForms stores user passwords in recoverable format CVE-2013-4423 Fix available 5.5 MediumNovember 4, 2019
• manageiq evm evm, red hat cloudforms 3.0, redhat cloudforms +1 more +3 more Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to... CVE-2013-0186 Fix available 6.1 MediumNovember 1, 2019
• rubyzip project rubyzip, fedoraproject fedora, redhat cloudforms +2 more Rubyzip denial of service CVE-2019-16892 Fix available 5.5 MediumSeptember 25, 2019
• [unknown] cloudforms, redhat cloudforms management engine +1 more A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of... CVE-2019-10177 6.5 MediumJune 27, 2019
• red hat cfme, redhat cfme-gemset, cloudforms +2 more cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to... CVE-2019-10159 Fix available 4.3 MediumJune 14, 2019
• [unknown] cloudforms, redhat cloudforms management engine +1 more A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs... CVE-2017-15123 5.3 MediumJune 12, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• debian linux, fedoraproject fedora, opensuse leap +5 more +7 more Path Traversal in Action View CVE-2019-5418 In KEVPublic exploitFix available EPSS 98.5% 7.5 HighMarch 13, 2019
• rubyonrails rails, debian linux, fedoraproject fedora +4 more +6 more Denial of Service Vulnerability in Action View CVE-2019-5419 Fix available 7.5 HighMarch 13, 2019
• rails https://github.com/rails/rails, redhat cloudforms, rubyonrails rails +2 more Improper Access Control in activejob CVE-2018-16476 Fix available 7.5 HighNovember 30, 2018
• [unknown] cfme, redhat cloudforms, cloudforms management engine +2 more A code injection flaw was found in the way capacity and utilization imported control files are... CVE-2016-5402 Fix available 8.8 HighOctober 31, 2018
• redhat cloudforms, red hat cfme, redhat cloudforms management engine +2 more A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with... CVE-2016-7047 Fix available 4.3 MediumSeptember 11, 2018
• redhat cloudforms, red hat cfme, redhat cloudforms management engine +2 more It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions... CVE-2016-7071 Fix available 8.8 HighSeptember 10, 2018
• red hat ansible tower, redhat cloudforms management engine +1 more Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF... CVE-2017-7528 5.2 MediumAugust 22, 2018
• redhat cloudforms, red hat cfme, redhat cloudforms management engine +2 more A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant... CVE-2017-2632 Fix available 4.9 MediumJuly 27, 2018
• [unknown] cloudforms, redhat cloudforms management engine +1 more A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed... CVE-2017-2653 Fix available 4.1 MediumJuly 27, 2018
• red hat ansible tower, redhat cloudforms +1 more A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a... CVE-2017-12148 Fix available 8.4 HighJuly 27, 2018
• [unknown] cfme, redhat cloudforms management engine +1 more The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud... CVE-2017-7497 Fix available 4.1 MediumJuly 27, 2018
• [unknown] cloudforms, redhat cloudforms management engine +1 more A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the... CVE-2017-15125 Fix available 6.5 MediumJuly 27, 2018
• [unknown] cloudforms, redhat cloudforms management engine +1 more It was found that CloudForms does not verify that the server hostname matches the domain name in... CVE-2017-2639 Fix available 6.5 MediumJuly 27, 2018
• [unknown] cloudforms, redhat cloudforms management engine +1 more CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on... CVE-2017-2664 Fix available 6.5 MediumJuly 26, 2018
• red hat cfme, redhat cloudforms, cloudforms management engine +2 more In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that... CVE-2017-7530 Fix available 8.8 HighJuly 26, 2018
• [unknown] cfme, redhat cloudforms, cloudforms management engine +2 more CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby... CVE-2018-10905 Fix available 7.8 HighJuly 24, 2018
• [unknown] ansible, canonical ubuntu linux, debian linux +4 more +6 more Ansible exposes sensitive data in log files and on the terminal CVE-2018-10855 Fix available 5.9 MediumJuly 1, 2018
• rubyzip project rubyzip, debian linux, redhat cloudforms +2 more Rubyzip gem contains a Directory Traversal vulnerability in zip file component CVE-2018-1000544 Fix available 9.8 CriticalJune 26, 2018
• Show olderLoading…