Opennebula
Approved changes feed: RSS · Atom
cpe:2.3:a:opennebula:opennebula:*:*:*:*:enterprise:*:*:*part: a version: * update: *
| Vendor | Opennebula (5a54a4ea-aac5-57c3-95cf-12ba1f8cfae9) |
|---|---|
| Product | Opennebula (00396a2a-8965-5f37-aea8-a552d5fc6eaa) |
| Edition | * |
| Language | * |
| Software edition | enterprise |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-37426 |
vulnerable | 2026-06-08 05:47:12.857804 |
Details available
MEDIUM (4.3)
Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Content Injection.
Published: 2022-10-28T15:09:21.611Z
Updated: 2024-08-03T10:29:21.036Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37425 |
vulnerable | 2026-06-08 05:47:12.857358 |
The FILES directive inside a VM template allows execution of uploaded files when the template is instantiated, resulting in a Remote Code Execution (RCE) attack.
CRITICAL (9.9)
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in OpenNebula OpenNebula core on Linux allows Remote Code Inclusion.
Published: 2022-10-28T15:09:21.268Z
Updated: 2024-08-03T10:29:21.021Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37424 |
vulnerable | 2026-06-08 05:47:12.855733 |
The FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure.
MEDIUM (6.5)
Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery.
Published: 2022-10-28T15:09:20.963Z
Updated: 2024-08-03T10:29:21.020Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.