EV
Product
Enterprise Virtualization Manager
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 1
Watch
Add Enterprise Virtualization Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1072 | 9.8 | Jun 26 | ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files Affected: 4.2 |
| CVE-2015-7544 | 9.1 | Sep 25 | redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows remote authenticated users with the SuperUser role on any Entity to… Affected: 3.4; 3.4.1; 3.5.0 |
| CVE-2018-8897 | 7.8 | May 8 | A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all… Affected: 3.0 |
| CVE-2015-5293 | 5.9 | Aug 24 | Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might allow remote attackers to… Affected: through 3.6.0 |
| CVE-2009-3552 | 3.1 | Nov 9 | In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Manager interface (a Windows Presentation… Affected: 2.2 |
| CVE-2015-0257 | – | May 1 | Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup,… Affected: through 3.5.0 |
| CVE-2015-0237 | – | May 1 | Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote… Affected: through 3.5.0 |
| CVE-2014-3573 | – | Oct 18 | The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows remote attackers to… Affected: through 3.4.1 |
| CVE-2013-6434 | – | Jan 24 | The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client invocation method, initially makes insecure connections to the… Affected: through 3.2; 2.1; 2.2; 2.2.3; 3.0; 3.1 |
| CVE-2013-2144 | – | Jul 3 | Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service… Affected: through 3.1; 2.1; 2.2; 2.2.3; 3.0 |
| CVE-2013-0168 | – | Mar 12 | The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which allows remote… Affected: through 3.1; 2.1; 2.2; 2.2.3; 3.0 |
| CVE-2012-6115 | – | Mar 12 | The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled, logs the… Affected: through 3.1; 2.1; 2.2; 2.2.3; 3.0 |
| CVE-2012-5516 | – | Jan 4 | Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage domains, does not properly wipe-after-delete, which prevents disks from being… Affected: through 3.0; 2.1; 2.2; 2.2.3; 2.2.4 |
| CVE-2012-2696 | – | Jan 4 | The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly check privileges, which allows remote authenticated users to query arbitrary… Affected: through 3.0; 2.1; 2.2; 2.2.3 |
| CVE-2012-0861 | – | Jan 4 | The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and… Affected: through 3.0; 2.1; 2.2; 2.2.3 |
| CVE-2012-0860 | – | Jan 4 | Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a… Affected: through 3.0; 2.1; 2.2; 2.2.3 |
| CVE-2011-4316 | – | Jan 4 | Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users… Affected: through 3.0; 2.1; 2.2; 2.2.3 |
| CVE-2010-2793 | – | Dec 8 | Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a… Affected: through 2.2.3; 2.1; 2.2 |
| CVE-2010-2224 | – | Jun 24 | The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) before 2.2 does not properly pass the postzero parameter during operations on deleted… Affected: through 2.1 |
Showing 19