Cfme (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-10-31. Vendor: Unknown.

CVEs of Cfme

• CVE-2016-5402 - CVSS 8.8 (high), 2018-10-31: A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the…
• CVE-2017-7497 - CVSS 4.3 (medium), 2018-07-27: The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage…
• CVE-2018-10905 - CVSS 7.8 (high), 2018-07-24: CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an…