Red Hat Edeploy vulnerabilities

5 CVEs affecting Red Hat Edeploy, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3701, published 2019-12-15.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-8174, published 2017-09-19. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.
• CVE-2014-3700, published 2019-11-21. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data
• CVE-2014-3699, published 2019-12-15. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. eDeploy has RCE via cPickle deserialization of untrusted data
• CVE-2014-3702, published 2017-10-16. Critical severity, CVSS 9.1. EPSS: 1.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot…
• CVE-2014-3701, published 2019-12-15. High severity, CVSS 8.1. EPSS: 1.5% chance of exploitation in the next 30 days. eDeploy has tmp file race condition flaws