[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWcuOAEc_vpoAqBGCy-7CpypmR_3Xyqbqhiu1XE6BqRM":3,"g5a-family:redhat\u002Fcloudforms":180,"g5a-ex:redhat\u002Fcloudforms@*":202},{"success":4,"data":5},true,{"product":6,"versions":69,"topVulnerabilitiesByEpss":93,"kevVulnerabilities":153,"seoMetadata":159,"meta":178},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":68},"redhat","cloudforms",23,48,1,"2021-06-07",[14,18,20,23,25,27,30,33,36,39,42,44,46,48,50,52,54,56,58,60,62,64,66],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.0",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"1.1",{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},"3.0",6,{"version":24,"cve_count":11,"kev_count":16,"has_kev":17},"3.2",{"version":26,"cve_count":11,"kev_count":16,"has_kev":17},"4.0",{"version":28,"cve_count":29,"kev_count":16,"has_kev":17},"4.1",3,{"version":31,"cve_count":32,"kev_count":16,"has_kev":17},"4.2",4,{"version":34,"cve_count":35,"kev_count":16,"has_kev":17},"4.5",11,{"version":37,"cve_count":38,"kev_count":11,"has_kev":4},"4.6",14,{"version":40,"cve_count":41,"kev_count":11,"has_kev":4},"4.7",10,{"version":43,"cve_count":32,"kev_count":16,"has_kev":17},"5.0.0",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.1",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.2",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.3",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.4",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.5",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.6",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.7",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"5.10",{"version":61,"cve_count":11,"kev_count":16,"has_kev":17},"5.11",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"5.11.10.1",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"5.11.7.0",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"5.9","Cloudforms by Redhat is a technology product with 23 tracked versions and 48 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},{"version":24,"cve_count":11,"kev_count":16,"has_kev":17},{"version":26,"cve_count":11,"kev_count":16,"has_kev":17},{"version":28,"cve_count":29,"kev_count":16,"has_kev":17},{"version":31,"cve_count":32,"kev_count":16,"has_kev":17},{"version":34,"cve_count":35,"kev_count":16,"has_kev":17},{"version":37,"cve_count":38,"kev_count":11,"has_kev":4},{"version":40,"cve_count":41,"kev_count":11,"has_kev":4},{"version":43,"cve_count":32,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":11,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},[94,102,109,116,123,128,133,137,142,146],{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"cvssVersion":99,"severity":100,"isKev":4,"epssScore":101},"CVE-2019-5418","There is a File Content Disclosure vulnerability in Action View \u003C5.2.2.1, \u003C5.1.6.2, \u003C5.0.7.2, \u003C4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.","2019-03-27",7.5,"v3.1","High",0.98507,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":107,"severity":100,"isKev":17,"epssScore":108},"CVE-2017-11610","The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.","2017-08-23",8.8,"v3.0",0.87378,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"cvssVersion":99,"severity":114,"isKev":17,"epssScore":115},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,"Medium",0.8682,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":120,"cvssVersion":99,"severity":121,"isKev":17,"epssScore":122},"CVE-2018-7750","transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.","2018-03-13",9.8,"Critical",0.27105,{"cveId":124,"description":125,"publishedDate":126,"cvssScore":98,"cvssVersion":107,"severity":100,"isKev":17,"epssScore":127},"CVE-2018-3760","There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately.","2018-06-26",0.26717,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":106,"cvssVersion":99,"severity":100,"isKev":17,"epssScore":132},"CVE-2018-1058","A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.","2018-03-02",0.13098,{"cveId":134,"description":135,"publishedDate":97,"cvssScore":98,"cvssVersion":99,"severity":100,"isKev":17,"epssScore":136},"CVE-2019-5419","There is a possible denial of service vulnerability in Action View (Rails) \u003C5.2.2.1, \u003C5.1.6.2, \u003C5.0.7.2, \u003C4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.",0.08778,{"cveId":138,"description":139,"publishedDate":140,"cvssScore":106,"cvssVersion":107,"severity":100,"isKev":17,"epssScore":141},"CVE-2016-5402","A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.","2018-10-31",0.05931,{"cveId":143,"description":144,"publishedDate":126,"cvssScore":120,"cvssVersion":99,"severity":121,"isKev":17,"epssScore":145},"CVE-2018-1000544","rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames \"..\u002F\" to write arbitrary files to the filesystem..",0.04407,{"cveId":147,"description":148,"publishedDate":149,"cvssScore":150,"cvssVersion":151,"severity":114,"isKev":17,"epssScore":152},"CVE-2014-0081","Multiple cross-site scripting (XSS) vulnerabilities in actionview\u002Flib\u002Faction_view\u002Fhelpers\u002Fnumber_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper.","2014-02-20",4.3,"v2",0.04032,[154],{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"severity":100,"isKev":4,"epssScore":101,"cisaVulnName":155,"cisaDateAdded":156,"cisaShortDescription":157,"cisaRequiredAction":158},"Rails Ruby on Rails Path Traversal Vulnerability","2025-07-07","Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":160,"metaDescription":161,"keywords":162,"structuredData":163},"Cloudforms by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Cloudforms by Redhat covering 23 versions with 48 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Cloudforms vulnerabilities, Cloudforms security, Cloudforms CVE, Redhat Cloudforms, Cloudforms threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Cloudforms KEV, Cloudforms exploited vulnerabilities",{"@context":164,"@type":165,"name":166,"description":161,"url":167,"manufacturer":168,"applicationCategory":172,"softwareVersion":173,"mainEntity":174},"https:\u002F\u002Fschema.org","SoftwareApplication","Cloudforms","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fcloudforms",{"@type":169,"name":170,"url":171},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","23 versions tracked",{"@type":175,"name":176,"description":177,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Cloudforms Security Vulnerabilities","Security vulnerabilities affecting Cloudforms by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":179,"apiVersion":21},"2026-10-17T16:57:13.633Z",[181,184,187,190,192,194,196,198,200],{"product":182,"cves":183},"cloudforms_management_engine",42,{"product":185,"cves":186},"cloudforms_3.0_management_engine",13,{"product":188,"cves":189},"cloudforms_3.0.3_management_engine",2,{"product":191,"cves":189},"cloudforms_3.0.4_management_engine",{"product":193,"cves":189},"cloudforms_3.0.1_management_engine",{"product":195,"cves":189},"cloudforms_3.1_management_engine",{"product":197,"cves":189},"cloudforms_cloud_engine",{"product":199,"cves":189},"cloudforms_3.0.5_management_engine",{"product":201,"cves":189},"cloudforms_3.0.2_management_engine",{"rows":203,"total":11,"capped":17,"failed":16},[204],{"cveId":95,"name":155,"severity":100,"cvss":98,"added":156,"epss":101,"published":205,"ranges":206,"checked":4,"hits":207,"covers":17},"2019-03-27T14:29:01.533",[37,40],[]]