OV
Product
Ovirt-engine
On CISA KEVExploited in the wild
9
CVEs
1
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 6Low 0
Watch
Add Ovirt-engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-0847 In wildKEV | 7.8 | Mar 7 | Linux Kernel Privilege Escalation Vulnerability Affected: 4.4.10.2 |
| CVE-2013-4367 | 7.8 | Nov 1 | ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python's os.chmod() works when… Affected: 3.2 |
| CVE-2024-0822 | 7.5 | Jan 25 | An authentication bypass vulnerability was found in overt-engine Affected: All versions, or not specified |
| CVE-2020-35497 | 6.5 | Dec 21 | A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key Affected: through 4.4.3 |
| CVE-2022-3193 | 6.1 | Sep 28 | An HTML injection/reflected Cross-site scripting (XSS) vulnerability was found in the ovirt-engine Affected: 4.3.0 |
| CVE-2020-14333 | 6.1 | Aug 18 | A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, resulting in a reflected cross-site… Affected: through 4.4.0 |
| CVE-2019-19336 | 6.1 | Mar 19 | A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8 Affected: before 4.3.8 |
| CVE-2018-1073 | 5.3 | Jun 19 | The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker to discover the names… Affected: before 4.2.3 |
| CVE-2024-7259 | 4.9 | Sep 26 | A flaw was found in oVirt Affected: before 4.5.7 |
Showing 9