CL
Product
Cloudforms
On CISA KEVExploited in the wild
48
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 21Medium 16Low 0
Watch
Add Cloudforms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1000544 | 9.8 | Jun 26 | rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem Affected: 4.6 |
| CVE-2018-7750 | 9.8 | Mar 13 | transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and… Affected: 4.5; 4.6 |
| CVE-2020-14325 | 9.1 | Aug 11 | Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based… Affected: before 5.11.7.0 |
Showing 3