Enterprise Virtualization Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:enterprise_virtualization_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Enterprise Virtualization Manager (d0ec600a-b2f8-5a17-8c2a-4d716ee6e2fe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-5293 |
vulnerable | 2026-06-08 05:06:49.492863 |
Details available
Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might allow remote attackers to communicate with a system designated to be unreachable.
Published: 2017-08-24T20:00:00.000Z
Updated: 2024-08-06T06:41:09.513Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0257 |
vulnerable | 2026-06-08 05:06:14.157862 |
Details available
Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local users to obtain sensitive information by reading files in the directory.
Published: 2015-05-01T15:00:00.000Z
Updated: 2024-08-06T04:03:10.650Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0237 |
vulnerable | 2026-06-08 05:06:14.054531 |
Details available
Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain.
Published: 2015-05-01T15:00:00.000Z
Updated: 2024-08-06T04:03:10.380Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3573 |
vulnerable | 2026-06-08 05:05:33.554563 |
Details available
The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML/RSDL document, related to an XML External Entity (XXE) issue.
Published: 2014-10-18T00:00:00.000Z
Updated: 2024-08-06T10:50:17.239Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6434 |
vulnerable | 2026-06-08 05:04:56.752095 |
Details available
The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client invocation method, initially makes insecure connections to the SPICE server, which allows man-in-the-middle attackers to spoof the SPICE server.
Published: 2014-01-24T18:00:00.000Z
Updated: 2024-08-06T17:39:01.295Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2144 |
vulnerable | 2026-06-08 05:03:58.624041 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0168 |
vulnerable | 2026-06-08 05:03:02.251061 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6115 |
vulnerable | 2026-06-08 05:02:59.547823 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2696 |
vulnerable | 2026-06-08 05:02:05.621569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0861 |
vulnerable | 2026-06-08 05:00:46.001022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4316 |
vulnerable | 2026-06-08 04:59:30.323376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.