Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:*

part: a version: 2.2 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Virtualization Manager (d0ec600a-b2f8-5a17-8c2a-4d716ee6e2fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6434 vulnerable 2026-06-08 05:04:56.753350 Details available
The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client invocation method, initially makes insecure connections to the SPICE server, which allows man-in-the-middle attackers to spoof the SPICE server.
Published: 2014-01-24T18:00:00.000Z
Updated: 2024-08-06T17:39:01.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2144 vulnerable 2026-06-08 05:03:58.625203 Details available
Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.
Published: 2013-07-03T18:00:00.000Z
Updated: 2024-08-06T15:27:40.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0168 vulnerable 2026-06-08 05:03:02.251107 Details available
The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which allows remote authenticated storage admins to cause a denial of service (free space consumption of other storage domains) via unspecified vectors.
Published: 2013-03-12T22:00:00.000Z
Updated: 2024-08-06T14:18:09.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6115 vulnerable 2026-06-08 05:02:59.549246 Details available
The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file.
Published: 2013-03-12T22:00:00.000Z
Updated: 2024-08-06T21:28:38.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2696 vulnerable 2026-06-08 05:02:05.622932 Details available
The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly check privileges, which allows remote authenticated users to query arbitrary information via a (1) SOAP or (2) GWT request.
Published: 2013-01-04T22:00:00.000Z
Updated: 2024-08-06T19:42:31.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0861 vulnerable 2026-06-08 05:00:46.002850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4316 vulnerable 2026-06-08 04:59:30.324861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.