Ovirt-engine (Ovirt) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 433 known versions, newest CVE from 2024-09-26. Vendor: Ovirt.
CVEs of Ovirt-engine
- CVE-2024-7259 - CVSS 4.9 (medium), 2024-09-26: A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools…
- CVE-2024-0822 - CVSS 7.5 (high), 2024-01-25: An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in…
- CVE-2022-3193 - CVSS 6.1 (medium), 2022-09-28: An HTML injection/reflected Cross-site scripting (XSS) vulnerability was found in the ovirt-engine. A parameter "error_description" fails to sanitize the…
- CVE-2022-0847 - CVSS 7.8 (high), 2022-03-10: A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe…
- CVE-2020-35497 - CVSS 6.5 (medium), 2020-12-21: A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public…
- CVE-2020-14333 - CVSS 6.3 (medium), 2020-08-18: A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, resulting in a…
- CVE-2019-19336 - CVSS 6.1 (medium), 2020-03-19: A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the…
- CVE-2013-4367 - CVSS 7.8 (high), 2019-11-01: ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python's…
- CVE-2018-1073 - CVSS 5.3 (medium), 2018-06-19: The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker…
