Ovirt Engine
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:ovirt-engine:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Ovirt Engine (3cebeb14-e7cc-58d2-b505-75b70778618b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ovirt/ovirt-engine |
purl2cpe | 2026-06-01 10:12:52.672751 |
pkg:maven/org.ovirt.engine.sdk/ovirt-engine-sdk-java |
purl2cpe | 2026-06-01 10:12:52.672753 |
pkg:rpm/fedora/ovirt-engine |
purl2cpe | 2026-06-01 10:12:52.672755 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-10775 |
vulnerable | 2026-06-08 05:16:35.870259 |
Details available
An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.
Published: 2020-08-24T16:13:00.000Z
Updated: 2024-08-04T11:14:15.422Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1062 |
vulnerable | 2026-06-08 05:11:16.799979 |
Details available
A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt, could cause a disk to be incompletely zeroed when removed from a VM. If the same storage blocks happen to be later allocated to a new disk attached to another VM, potentially sensitive data could be revealed to privileged users of that VM.
Published: 2018-03-06T15:00:00.000Z
Updated: 2024-09-17T02:16:32.159Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000095 |
vulnerable | 2026-06-08 05:10:25.421364 |
Details available
oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting (XSS) vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3.
Published: 2018-03-13T01:00:00.000Z
Updated: 2024-08-05T12:33:49.200Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.