CVE-2018-1000095: Red Hat Ovirt-Engine

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting (XSS) vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3.

Affected products

• Red Hat Ovirt-Engine: from 4.2.0, up to and including 4.2.2

Published 2018-03-13. Last modified 2026-06-17.