Redhat Cloudforms Management Engine vulnerabilities

• red hat cloudforms, redhat cloudforms management engine +1 more A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL:... CVE-2014-8164 9.1 CriticalJuly 6, 2022
• [unknown] cloudforms, redhat cloudforms management engine +1 more Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update CVE-2020-10780 6.3 MediumAugust 11, 2020
• [unknown] cloudforms, redhat cloudforms management engine +1 more Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update CVE-2020-14324 9.1 CriticalAugust 11, 2020
• [unknown] cloudforms, redhat cloudforms management engine +1 more Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update CVE-2020-14296 7.1 HighAugust 11, 2020
• [unknown] cloudforms, redhat cloudforms management engine +1 more A flaw was found in the CloudForms management engine version 5.10 and CloudForms management... CVE-2019-14894 Fix available 8.0 HighJune 22, 2020
• red hat ansible, redhat ansible tower, cloudforms management engine +1 more +3 more Argument Injection in Ansible CVE-2020-1738 Fix available 3.9 LowMarch 16, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible CVE-2020-1740 Fix available 3.9 LowMarch 16, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Path Traversal in Ansible CVE-2020-1735 Fix available 4.2 MediumMarch 16, 2020
• red hat ansible, fedoraproject fedora, redhat ansible tower +2 more +4 more Incorrect Permission Assignment for Critical Resource in Ansible CVE-2020-1736 Fix available 2.2 LowMarch 16, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Exposure of Sensitive Information to an Unauthorized Actor in Ansible CVE-2020-1739 Fix available 3.9 LowMarch 12, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File CVE-2020-1733 Fix available 5.0 MediumMarch 11, 2020
• red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 more Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible CVE-2019-14905 Fix available 7.3 HighJanuary 28, 2020
• cfme (cloudforms management engine) (cloudforms management engine), redhat cloudforms management engine +1 more CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during... CVE-2014-3536 5.5 MediumDecember 15, 2019
• cfme, redhat cloudforms, cloudforms management engine +2 more CFME: CSRF protection vulnerability via permissive check of the referrer header CVE-2014-0197 8.8 HighDecember 13, 2019
• red hat ansible, debian linux, opensuse backports sle +5 more +7 more Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible CVE-2019-14864 Fix available 5.7 MediumDecember 6, 2019
• [unknown] cloudforms, redhat cloudforms management engine +1 more cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A... CVE-2018-10854 6.5 MediumNovember 22, 2019
• nokogiri, ruby nokogiri gem, debian linux +5 more +7 more Nokogiri vulnerable to DoS while parsing XML entities CVE-2013-6461 Fix available 6.5 MediumNovember 5, 2019
• nokogiri, ruby nokogiri gem, debian linux +5 more +7 more Nokogiri vulnerable to DoS while parsing XML documents CVE-2013-6460 Fix available 6.5 MediumNovember 5, 2019
• [unknown] cloudforms, redhat cloudforms management engine +1 more A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of... CVE-2019-10177 6.5 MediumJune 27, 2019
• [unknown] cloudforms, redhat cloudforms management engine +1 more A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs... CVE-2017-15123 5.3 MediumJune 12, 2019
• [unknown] cfme, redhat cloudforms, cloudforms management engine +2 more A code injection flaw was found in the way capacity and utilization imported control files are... CVE-2016-5402 Fix available 8.8 HighOctober 31, 2018
• redhat cloudforms, red hat cfme, redhat cloudforms management engine +2 more A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with... CVE-2016-7047 4.3 MediumSeptember 11, 2018
• redhat cloudforms, red hat cfme, redhat cloudforms management engine +2 more It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions... CVE-2016-7071 Fix available 8.8 HighSeptember 10, 2018
• red hat ansible tower, redhat cloudforms management engine +1 more Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF... CVE-2017-7528 5.2 MediumAugust 22, 2018
• redhat cloudforms, red hat cfme, redhat cloudforms management engine +2 more A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant... CVE-2017-2632 4.9 MediumJuly 27, 2018
• [unknown] cloudforms, redhat cloudforms management engine +1 more A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed... CVE-2017-2653 Fix available 4.1 MediumJuly 27, 2018
• [unknown] cfme, redhat cloudforms management engine +1 more The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud... CVE-2017-7497 4.1 MediumJuly 27, 2018
• [unknown] cloudforms, redhat cloudforms management engine +1 more A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the... CVE-2017-15125 6.5 MediumJuly 27, 2018
• [unknown] cloudforms, redhat cloudforms management engine +1 more It was found that CloudForms does not verify that the server hostname matches the domain name in... CVE-2017-2639 6.5 MediumJuly 27, 2018
• [unknown] cloudforms, redhat cloudforms management engine +1 more CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on... CVE-2017-2664 Fix available 6.5 MediumJuly 26, 2018
• red hat cfme, redhat cloudforms, cloudforms management engine +2 more In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that... CVE-2017-7530 8.8 HighJuly 26, 2018
• [unknown] cfme, redhat cloudforms, cloudforms management engine +2 more CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby... CVE-2018-10905 7.8 HighJuly 24, 2018
• redhat cloudforms management engine Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session... CVE-2013-2049 7.5 HighMay 1, 2018
• redhat cloudforms management engine The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as... CVE-2014-0087 8.8 HighJanuary 11, 2018
• redhat cloudforms management engine CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate. CVE-2016-4457 7.5 HighJune 8, 2017
• redhat cloudforms management engine Padding oracle flaw in CloudForms Management Engine (aka CFME) 5 allows remote attackers to... CVE-2016-3702 5.3 MediumApril 21, 2017
• redhat cloudforms management engine Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to... CVE-2016-7040 Fix available 8.8 HighOctober 7, 2016
• redhat cloudforms, cloudforms management engine +1 more Red Hat CloudForms 3.2 Management Engine (CFME) 5.4.4 and CloudForms 4.0 Management Engine (CFME)... CVE-2015-7502 Fix available 5.1 MediumApril 11, 2016
• nokogiri, redhat cloudforms management engine, enterprise mrg +5 more +7 more Nokogiri is vulnerable to XML External Entity (XXE) attack CVE-2012-6685 Fix available 7.5 HighMay 27, 2015
• redhat manageiq enterprise virtualization manager, cloudforms management engine +1 more SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management... CVE-2013-2050 EPSS 15.7% 7.5 HighJanuary 11, 2014
• redhat cloudforms management engine Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms... CVE-2013-2068 Public exploit EPSS 58.6% 9.4 HighSeptember 28, 2013
• redhat cloudforms management engine The Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary... CVE-2013-4172 8.5 HighAugust 23, 2013