Redhat Ovirt-engine vulnerabilities

• redhat ovirt-engine, oracle virtualization +1 more An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it... CVE-2020-10775 5.3 MediumAugust 24, 2020
• ovirt, redhat ovirt-engine, virtualization +2 more oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data... CVE-2015-1780 6.5 MediumNovember 22, 2019
• redhat ovirt-engine, [unknown] rhv +1 more In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be... CVE-2017-7510 Fix available 8.8 HighMarch 25, 2019
• redhat ovirt-engine oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting (XSS) vulnerability in the name... CVE-2018-1000095 4.8 MediumMarch 13, 2018
• ovirt, redhat ovirt-engine +1 more A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable... CVE-2018-1062 Fix available 5.3 MediumMarch 6, 2018
• ovirt, redhat ovirt-engine +1 more oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin,... CVE-2014-7851 Fix available 7.5 HighOctober 16, 2017
• redhat ovirt-engine Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject... CVE-2016-3113 Public exploit 6.1 MediumAugust 7, 2017
• redhat ovirt-engine The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated... CVE-2016-3077 Fix available 6.5 MediumJune 6, 2017
• redhat ovirt-engine Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote... CVE-2014-0151 6.8 MediumFebruary 13, 2015
• ovirt, redhat ovirt-engine +1 more Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows... CVE-2014-0152 6.8 MediumSeptember 8, 2014