Cloudforms Management Engine
Vendor:
First CVE: Aug 23, 2013 · Active for 12 years
42
Total CVEs
More Total CVEs than 97% of tracked products
5.3
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 32% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Cloudforms Management Engine over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 23, 2013
12 years ago
Most Recent CVE
Jul 6, 2022
1,479 days ago
CVE Severity & Scoring
Cloudforms Management Engine42 CVEs
50%
38%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local10 (23.8%)
Network28 (66.7%)
Unknown3 (7.1%)
Physical0 (0.0%)
Adjacent Network1 (2.4%)
Attack Complexity
Low35 (83.3%)
High4 (9.5%)
Unknown3 (7.1%)
User Interaction
None29 (69.0%)
Unknown3 (7.1%)
Required10 (23.8%)
Privileges Required
Low22 (52.4%)
High5 (11.9%)
None12 (28.6%)
Unknown3 (7.1%)
Top CVEs
Signals from CVEs in this product scope (42 CVEs).
42 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-2068HIGH Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite arbitrary files via a | Sep 28, 2013 | 9.4 | 73 | NO | YES |
CVE-2013-2050HIGH SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allow | Jan 11, 2014 | 7.5 | 35 | NO | YES |
CVE-2016-5402HIGH A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilizati | Oct 31, 2018 | 8.8 | 30 | NO | NO |
CVE-2017-7530HIGH In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that privilege check is missing when invoking arbitrary methods via filtering on VMs that M | Jul 26, 2018 | 8.8 | 29 | NO | NO |
CVE-2016-7040HIGH Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote aut | Oct 7, 2016 | 8.8 | 29 | NO | NO |
CVE-2020-14324CRITICAL A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authent | Aug 11, 2020 | 9.1 | 28 | NO | NO |
CVE-2016-7071HIGH It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. A remote, authenticated attacker could use this | Sep 10, 2018 | 8.8 | 28 | NO | NO |
CVE-2014-8164CRITICAL A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat CloudForms 5.x. | Jul 6, 2022 | 9.1 | 27 | NO | NO |
CVE-2019-14894HIGH A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An atta | Jun 22, 2020 | 7.2 | 26 | NO | NO |
CVE-2014-0197HIGH CFME: CSRF protection vulnerability via permissive check of the referrer header | Dec 13, 2019 | 8.8 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (42 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
2 CVEs
4.8% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
2.4% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (42 CVEs).
Media Mentions
Signals from CVEs in this product scope (42 CVEs).
Top CNAs Publishing CVEs For Cloudforms Management Engine
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.9 | 3 | 6.6 | 0.7% | 0 | 0 |
| 5.8.0 | 1 | 4.3 | 1.0% | 0 | 0 |
| 5.8 | 3 | 6.9 | 0.7% | 0 | 0 |
| 5.7.2 | 1 | 4.3 | 1.0% | 0 | 0 |
| 5.7 | 1 | 7.5 | 1.1% | 0 | 0 |
| 5.6 | 1 | 8.8 | 5.9% | 0 | 0 |
| 5.5.0 | 1 | 5.1 | 0.3% | 0 | 0 |
| 5.4.4 | 1 | 5.1 | 0.3% | 0 | 0 |
| 5.11 | 1 | 7.2 | 4.1% | 0 | 0 |
| 5.10 | 2 | 6.8 | 2.5% | 0 | 0 |
| 5.1 | 3 | 8.5 | 25.2% | 0 | 2 |
| 5.0 | 17 | 5.8 | 0.9% | 0 | 0 |
| 4.7 | 3 | 6.3 | 0.7% | 0 | 0 |
| 4.1 | 1 | 8.8 | 2.3% | 0 | 0 |
| 2.0 | 1 | 7.5 | 1.2% | 0 | 0 |