Cloudforms 3.0 Management Engine
Vendor:
First CVE: Jan 23, 2014 · Active for 12 years
13
Total CVEs
More Total CVEs than 91% of tracked products
6.5
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
5.5
Avg CVSS
Higher Avg CVSS than 15% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Cloudforms 3.0 Management Engine over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 23, 2014
12 years ago
Most Recent CVE
Oct 18, 2017
3,204 days ago
CVE Severity & Scoring
Cloudforms 3.0 Management Engine13 CVEs
92%
All CVEs352,785 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network1 (7.7%)
Unknown12 (92.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (7.7%)
High0 (0.0%)
Unknown12 (92.3%)
User Interaction
None1 (7.7%)
Unknown12 (92.3%)
Required0 (0.0%)
Privileges Required
Low1 (7.7%)
High0 (0.0%)
None0 (0.0%)
Unknown12 (92.3%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-0057HIGH The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitra | Mar 18, 2014 | 7.5 | 23 | NO | NO |
CVE-2014-0180MEDIUM The wait_for_task function in app/controllers/application_controller.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to cause a denial | Jul 7, 2014 | 5.0 | 19 | NO | NO |
CVE-2014-3642MEDIUM vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to gain privileges via un | Oct 6, 2014 | 6.5 | 18 | NO | NO |
CVE-2014-3486MEDIUM The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 | Jul 7, 2014 | 6.9 | 18 | NO | NO |
CVE-2014-0184MEDIUM Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the e | Jul 7, 2014 | 4.9 | 18 | NO | NO |
CVE-2014-0137MEDIUM SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated user | May 14, 2014 | 6.5 | 18 | NO | NO |
CVE-2013-6443MEDIUM CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protect_from_forgery mechanism and conduct cross-site request forgery (CSRF) att | Jan 23, 2014 | 6.8 | 18 | NO | NO |
CVE-2014-7813MEDIUM Red Hat CloudForms 3 Management Engine (CFME) allows remote authenticated users to cause a denial of service (resource consumption) via vectors involving calls to the .to_sym rails | Oct 18, 2017 | 6.5 | 17 | NO | NO |
CVE-2014-0078MEDIUM The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing th | May 14, 2014 | 4.0 | 16 | NO | NO |
CVE-2014-0136MEDIUM The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary text into log files via uns | Oct 27, 2014 | 5.0 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Cloudforms 3.0 Management Engine
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.2.3.2 | 5 | 5.1 | 1.1% | 0 | 0 |
| 5.2.3 | 5 | 5.1 | 1.1% | 0 | 0 |
| 5.2.2 | 7 | 5.1 | 1.1% | 0 | 0 |
| 5.2.1.6 | 5 | 5.1 | 1.1% | 0 | 0 |
| 5.2.1 | 7 | 5.1 | 1.1% | 0 | 0 |
| 5.2 | 11 | 5.5 | 1.2% | 0 | 0 |