Red Hat cloudforms vulnerabilities

5 published CVEs name Red Hat cloudforms among the affected products.

Critical 0High 0Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2018-10854
cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrastructure mapping…
Red Hat · cloudforms
Medium6.5
CVE-2019-10177
A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and 5.10, due to user input is not properly…
Red Hat · CloudForms
Medium6.5
CVE-2017-2653
A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instead of just POST requests. This could…
Red Hat · CloudForms
Medium4.1
CVE-2017-15125
A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript…
Red Hat · cloudforms
Medium6.5
CVE-2017-2664
CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the rails application portion of CloudForms.…
Red Hat · CloudForms
Medium6.5