Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:cloudforms_3.1_management_engine:5.3:*:*:*:*:*:*:*

part: a version: 5.3 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductCloudforms 3.1 Management Engine (c0bf6734-d99f-5a86-a2cc-7b2642f8bac8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-7814 vulnerable 2026-06-08 05:05:59.920948 Details available
SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter.
Published: 2015-01-16T16:00:00.000Z
Updated: 2024-08-06T13:03:26.803Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3692 vulnerable 2026-06-08 05:05:42.460963 Details available
The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges.
Published: 2015-01-16T16:00:00.000Z
Updated: 2024-08-06T10:50:18.336Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.