Red Hat Cloudforms vulnerabilities

48 CVEs affecting Red Hat Cloudforms, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-25716, published 2021-06-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5418: Rails Ruby on Rails Path Traversal Vulnerability, published 2019-03-27. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2025-07-07. EPSS: 98.5% chance of exploitation in the next 30 days. There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the…
CVE-2017-11610, published 2017-08-23. High severity, CVSS 8.8. EPSS: 87.4% chance of exploitation in the next 30 days. The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC…
CVE-2019-11358, published 2019-04-20. Medium severity, CVSS 6.1. EPSS: 86.8% chance of exploitation in the next 30 days. jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an…
CVE-2018-7750, published 2018-03-13. Critical severity, CVSS 9.8. EPSS: 27.1% chance of exploitation in the next 30 days. transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1…
CVE-2018-3760, published 2018-06-26. High severity, CVSS 7.5. EPSS: 26.7% chance of exploitation in the next 30 days. There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that…
CVE-2018-1058, published 2018-03-02. High severity, CVSS 8.8. EPSS: 13.1% chance of exploitation in the next 30 days. A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of…
CVE-2019-5419, published 2019-03-27. High severity, CVSS 7.5. EPSS: 8.8% chance of exploitation in the next 30 days. There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and…
CVE-2016-5402, published 2018-10-31. High severity, CVSS 8.8. EPSS: 5.9% chance of exploitation in the next 30 days. A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could…
CVE-2018-1000544, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days. rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be…
CVE-2014-0081, published 2014-02-20. Medium severity, CVSS 4.3. EPSS: 4% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow…

Latest

CVE-2020-25716, published 2021-06-07. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is possible. An attacker with a specific group can perform actions restricted…
CVE-2020-14369, published 2020-12-02. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently…
CVE-2020-14325, published 2020-08-11. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with…
CVE-2020-10783, published 2020-08-11. High severity, CVSS 8.3. EPSS: 1% chance of exploitation in the next 30 days. Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Operator group can perform actions restricted only to EVM-Super-administrator group, leads to,…
CVE-2020-10779, published 2020-08-11. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right…
CVE-2020-10778, published 2020-08-11. Medium severity, CVSS 6.0. EPSS: 0.9% chance of exploitation in the next 30 days. In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is no server-side validation. This…
CVE-2020-10777, published 2020-08-11. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. A cross-site scripting flaw was found in Report Menu feature of Red Hat CloudForms 4.7 and 5. An attacker could use this flaw to execute a stored XSS attack on an application administrator using…
CVE-2014-0197, published 2019-12-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. CFME: CSRF protection vulnerability via permissive check of the referrer header
CVE-2013-4423, published 2019-11-04. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. CloudForms stores user passwords in recoverable format
CVE-2013-0186, published 2019-11-01. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.