Login Request a demo
CE
Product
Certification
by Redhat · last CVE May 26, 2021
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 4Medium 2Low 0
Severity
All severities9Critical3High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Certification to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-10868
7.5
1%
May 26
redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthenticated user to run a "Billion Laugh…
Affected: 7.0
CVE-2018-10865
7.5
1%
May 26
It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to call a "restart" RPC…
Affected: 7.0
CVE-2018-10863
7.5
1%
May 26
It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory, through the…
Affected: 7.0
CVE-2018-10869
7.5
3%
Jul 19
redhat-certification does not properly restrict files that can be download through the /download page
Affected: All versions, or not specified
Showing 4