Red Hat CloudForms 4.7
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:*
part: a version: 4.7 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Cloudforms (c3c620d3-52ec-5d23-8313-5fca10d999cb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ramrexx/cloudforms_essentials |
purl2cpe | 2026-06-01 10:12:57.209162 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-10783 |
vulnerable | 2026-06-08 05:16:35.888617 |
Details available
Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Operator group can perform actions restricted only to EVM-Super-administrator group, leads to, exporting or importing administrator files.
Published: 2020-08-11T12:35:13.000Z
Updated: 2024-08-04T11:14:15.473Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10779 |
vulnerable | 2026-06-08 05:16:35.879409 |
Details available
Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right criteria, it is possible to access some sensitive data within the CloudForms.
Published: 2020-08-11T12:40:35.000Z
Updated: 2024-08-04T11:14:15.372Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10778 |
vulnerable | 2026-06-08 05:16:35.879041 |
Details available
In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is no server-side validation. This business logic flaw violate the expected behavior.
Published: 2020-08-11T12:25:07.000Z
Updated: 2024-08-04T11:14:15.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10777 |
vulnerable | 2026-06-08 05:16:35.877982 |
Details available
A cross-site scripting flaw was found in Report Menu feature of Red Hat CloudForms 4.7 and 5. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms.
Published: 2020-08-11T12:17:53.000Z
Updated: 2024-08-04T11:14:15.588Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5419 |
vulnerable | 2026-06-08 05:13:59.086319 |
Details available
There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.
Published: 2019-03-27T13:43:19.000Z
Updated: 2024-08-04T19:54:53.468Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5418 |
vulnerable | 2026-06-08 05:13:59.084067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16892 |
vulnerable | 2026-06-08 05:13:09.544768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11358 |
vulnerable | 2026-06-08 05:12:36.943504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10159 |
vulnerable | 2026-06-08 05:12:22.364274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11627 |
vulnerable | 2026-06-08 05:10:38.735539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.