Known vulnerabilities in ovirt-engine (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
ovirt-engine (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:ovirt-engine_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
33
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.5.3.10-1.el8ev
4.5.3.8-2.el8ev
4.5.3.7-1.el8ev
4.5.0.7-0.9.el8ev
4.4.6.6-0.10.el8ev
4.4.5.11-0.1.el8ev
4.4.5.9-0.1.el8ev
4.4.4.7-0.2.el8ev
4.4.3.8-0.1.el8ev
4.4.2.3-0.6.el8ev
4.4.1.8-0.7.el8ev
4.5.3.5-1.el8ev
4.5.3.2-1.el8ev
4.5.2.4-0.1.el8ev
4.5.1.2-0.11.el8ev
4.4.10.6-0.1.el8ev
4.4.9.2-0.6.el8ev
4.4.7.6-0.11.el8ev
4.4.4.5-0.10.el8ev
4.3.10.3-0.2.el7
4.3.9.3-0.1.el7
4.3.8.2-0.4.el7
4.2.8.7-0.1.el7ev
4.1.4.2-0.1.el7
4.2.4.5-0.1.el7_3
4.2.3.6-0.1.el7
4.1.11.2-0.1.el7
4.1.9.1-0.1.el7
4.1.8.2-0.1.el7
4.1.7.6-0.1.el7
4.0.4.4-0.1.el7ev
Vulnerabilities (33)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU59693 - Deserialization of Untrusted Data CVE-2020-9493 |
CWE-502 | High | 4.4.10.6-0.1.el8ev | 18.01.2022 |
SB2021061626 SB2022011819 SB2022012640 and 62 more |
||
| #VU59692 - Deserialization of Untrusted Data CVE-2022-23302 |
CWE-502 | High | 4.4.10.6-0.1.el8ev | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 60 more |
||
| #VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305 |
CWE-89 | Medium | 4.4.10.6-0.1.el8ev | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 94 more |
||
| #VU58977 - Deserialization of Untrusted Data CVE-2021-4104 |
CWE-502 | Medium | 4.4.10.6-0.1.el8ev | 15.12.2021 |
SB2021121507 SB2021121647 SB2021121720 and 119 more |
||
| #VU57967 - Improper input validation CVE-2021-3807 |
CWE-20 | Medium | 4.5.1.2-0.11.el8ev | 05.11.2021 |
SB2021110513 SB2021112603 SB2022042257 and 51 more |
||
| #VU55315 - Incorrect Regular Expression CVE-2021-23343 |
CWE-185 | Medium | 4.4.7.6-0.11.el8ev | 26.07.2021 |
SB2021072624 SB2021072625 SB2022060618 and 24 more |
||
| #VU52985 - Incorrect Regular Expression CVE-2020-28469 |
CWE-185 | Medium | 4.4.7.6-0.11.el8ev, 4.4.9.2-0.6.el8ev | 10.05.2021 |
SB2021051002 SB2021051004 SB2021072625 and 26 more |
||
| #VU51945 - Improper Control of Generation of Code ('Code Injection') CVE-2021-23358 |
CWE-94 | High | 4.4.7.6-0.11.el8ev, 4.5.2.4-0.1.el8ev | 06.04.2021 |
SB2021040623 SB2021040624 SB2021050609 and 20 more |
||
| #VU48979 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-25649 |
CWE-611 | Medium | 4.4.4.5-0.10.el8ev | 03.12.2020 |
SB2020121510 SB2021020321 SB2021042112 and 68 more |
||
| #VU47053 - Improper input validation CVE-2020-7733 |
CWE-20 | Medium | 4.4.7.6-0.11.el8ev, 4.4.9.2-0.6.el8ev | 16.09.2020 |
SB2020092407 SB2021072133 SB2021072625 and 1 more |
||
| #VU24168 - Improper input validation CVE-2019-17195 |
CWE-20 | Medium | 4.3.9.3-0.1.el7 | 09.01.2020 |
SB2019101519 SB2020010921 SB2020040218 and 20 more |
||
| #VU20844 - Protection Mechanism Failure CVE-2019-10086 |
CWE-693 | Low | 4.3.9.3-0.1.el7 | 04.09.2019 |
SB2019090405 SB2019090406 SB2019121902 and 112 more |
||
| #VU689 - Improper Authentication CVE-2016-5432 |
CWE-287 | Low | 4.0.4.4-0.1.el7ev | 30.09.2016 |
SB2016093005 SB2016092819 |
Showing elements 21 - 40 out of 33