Skip to content
CVE Tracker
Back

CVE-2016-7047

A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability…

Medium4.3EPSS 1.3%
Published
Updated
Reserved
Assigned by
redhat

Description

A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access.

Scores

CVSS scores of CVE-2016-7047, by who scored it
Scored byCVSSScoreVector
redhatCNA (assigner)3.0Medium4.3CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NVDNVD · Modified3.0Medium4.3CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS (exploitation in 30 days)
1.3% · top 29% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

Affected products

  • Red Hat · cfme

    • affected 5.8.1.2
    • affected 5.7.3.1
    • affected 5.6.3.0

References (4)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .