EV
Product
Enterprise Virtualization
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 6Low 1
Watch
Add Enterprise Virtualization to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6338 | 6.8 | Apr 20 | ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin… Affected: 4.0 |
| CVE-2017-2614 | 6.3 | Jul 27 | When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if it is expired Affected: 4.0 |
| CVE-2014-8167 | 5.9 | Nov 13 | vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack Affected: 3.0 |
| CVE-2013-4280 | 5.5 | Nov 4 | Insecure temporary file vulnerability in RedHat vsdm 4.9.6 Affected: 3.0 |
| CVE-2016-6310 | 5.5 | Aug 22 | oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0 Affected: through 3.6 |
| CVE-2016-4443 | 5.5 | Dec 14 | Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log… Affected: 3.6 |
Showing 6