Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:virtualization:4.3:*:*:*:*:*:*:*

part: a version: 4.3 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductVirtualization (86ab44fd-0554-5ff1-8c60-ae1b1ce4ff46)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitlab/redhat/rhn-virtualization purl2cpe 2026-06-01 10:12:53.839311

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19336 vulnerable 2026-06-08 05:13:22.158655 Details available
MEDIUM (5.4)
A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user's oVirt session.
Published: 2020-03-19T13:11:16.000Z
Updated: 2024-08-05T02:16:47.108Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.