Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:ovirt-engine:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductOvirt Engine (3cebeb14-e7cc-58d2-b505-75b70778618b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ovirt/ovirt-engine purl2cpe 2026-06-01 10:12:52.672756
pkg:maven/org.ovirt.engine.sdk/ovirt-engine-sdk-java purl2cpe 2026-06-01 10:12:52.672758
pkg:rpm/fedora/ovirt-engine purl2cpe 2026-06-01 10:12:52.672759

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3113 vulnerable 2026-06-08 05:07:44.485449 Details available
Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML.
Published: 2017-08-07T20:00:00.000Z
Updated: 2024-08-05T23:47:57.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3077 vulnerable 2026-06-08 05:07:44.293445 Details available
The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service (process crash) for all VMs.
Published: 2017-06-06T18:00:00.000Z
Updated: 2024-08-05T23:40:15.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1780 vulnerable 2026-06-08 05:06:26.211343 Details available
oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center
Published: 2019-11-22T14:17:26.000Z
Updated: 2024-08-06T04:54:16.000Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.