Red Hat Cloudforms Management Engine vulnerabilities

42 CVEs affecting Red Hat Cloudforms Management Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-8164, published 2022-07-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-2068, published 2013-09-28. High severity, CVSS 9.4. EPSS: 58.6% chance of exploitation in the next 30 days. Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite arbitrary files via a .. (dot dot) in…
CVE-2013-2050, published 2014-01-11. High severity, CVSS 7.5. EPSS: 15.7% chance of exploitation in the next 30 days. SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote…
CVE-2016-5402, published 2018-10-31. High severity, CVSS 8.8. EPSS: 5.9% chance of exploitation in the next 30 days. A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could…
CVE-2019-14894, published 2020-06-22. High severity, CVSS 7.2. EPSS: 4.1% chance of exploitation in the next 30 days. A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into…
CVE-2020-14324, published 2020-08-11. Critical severity, CVSS 9.1. EPSS: 2.5% chance of exploitation in the next 30 days. A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker…
CVE-2016-7040, published 2016-10-07. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to…
CVE-2016-7071, published 2018-09-10. High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days. It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. A remote, authenticated attacker could use this flaw to execute…
CVE-2013-6461, published 2019-11-05. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
CVE-2012-6685, published 2020-02-19. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. Nokogiri before 1.5.4 is vulnerable to XXE attacks
CVE-2013-6460, published 2019-11-05. Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days. Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents

Latest

CVE-2014-8164, published 2022-07-06. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat CloudForms 5.x.
CVE-2020-14296, published 2020-08-11. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal…
CVE-2020-10780, published 2020-08-11. Medium severity, CVSS 6.3. EPSS: 0.7% chance of exploitation in the next 30 days. Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as CSV and opens the file with Excel. Once the victim opens the file, the formula…
CVE-2019-14905, published 2020-03-31. Medium severity, CVSS 5.6. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a…
CVE-2020-1740, published 2020-03-16. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret,…
CVE-2020-1738, published 2020-03-16. Low severity, CVSS 3.9. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be…
CVE-2020-1736, published 2020-03-16. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does…
CVE-2020-1735, published 2020-03-16. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All…