Skip to content

Known vulnerabilities in Red Hat cloudforms

Is your version affected?

CVE Summary Score Published
CVE-2018-10854 cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting 6.5 Medium Nov 22, 2019
CVE-2019-10177 A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9… 6.5 Medium Jun 27, 2019
CVE-2017-2653 A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instead… 4.1 Medium Jul 27, 2018
CVE-2017-15125 A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not… 6.5 Medium Jul 27, 2018
CVE-2017-2664 CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the… 6.5 Medium Jul 26, 2018

Other Red Hat products