CVE-2020-10777: Red Hat Cloudforms

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

A cross-site scripting flaw was found in Report Menu feature of Red Hat CloudForms 4.7 and 5. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms.

Affected products

• Red Hat Cloudforms: version 4.7 only; version 5.0.0 only

Published 2020-08-11. Last modified 2026-06-17.