[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxDDe7OHGNlUEMSFAOriiJslXPI2hf9IxR3FWoXXwuhU":3,"g5a-ex:redhat\u002Fcloudforms_3.0_management_engine@*":124,"g5a-family:redhat\u002Fcloudforms_3.0_management_engine":126},{"success":4,"data":5},true,{"product":6,"versions":37,"topVulnerabilitiesByEpss":47,"kevVulnerabilities":101,"seoMetadata":102,"meta":121},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":36},"redhat","cloudforms_3.0_management_engine",9,13,0,"2017-10-18",[14,18,21,24,26,28,30,32,34],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"5.2",11,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"5.2.1",7,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"5.2.1.6",5,{"version":25,"cve_count":20,"kev_count":11,"has_kev":17},"5.2.2",{"version":27,"cve_count":23,"kev_count":11,"has_kev":17},"5.2.3",{"version":29,"cve_count":23,"kev_count":11,"has_kev":17},"5.2.3.2",{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.4",{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.4.2",{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.5.3","Cloudforms 3.0 Management Engine by Redhat is a technology product with 9 tracked versions and 13 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[38,39,40,41,42,43,44,45,46],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":20,"kev_count":11,"has_kev":17},{"version":27,"cve_count":23,"kev_count":11,"has_kev":17},{"version":29,"cve_count":23,"kev_count":11,"has_kev":17},{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},[48,55,62,67,72,78,82,87,92,97],{"cveId":49,"description":50,"publishedDate":51,"cvssScore":23,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":54},"CVE-2014-0180","The wait_for_task function in app\u002Fcontrollers\u002Fapplication_controller.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via unspecified vectors.","2014-07-07","v2","Medium",0.01832,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":52,"severity":60,"isKev":17,"epssScore":61},"CVE-2014-0057","The x_button method in the ServiceController (vmdb\u002Fapp\u002Fcontrollers\u002Fservice_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitrary methods via unspecified vectors.","2014-03-18",7.5,"High",0.01587,{"cveId":63,"description":64,"publishedDate":51,"cvssScore":65,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":66},"CVE-2014-3489","lib\u002Futil\u002Fmiq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack.",4.3,0.01586,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":23,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":71},"CVE-2014-0136","The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors.","2014-10-27",0.01567,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":77},"CVE-2014-0137","SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, related to MiqReportResult.exists.","2014-05-14",6.5,0.0143,{"cveId":79,"description":80,"publishedDate":51,"cvssScore":65,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":81},"CVE-2014-0176","Cross-site scripting (XSS) vulnerability in application\u002Fpanel_control in CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",0.01429,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":76,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":86},"CVE-2014-3642","vmdb\u002Fapp\u002Fcontrollers\u002Fapplication_controller\u002Fperformance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to gain privileges via unspecified vectors, related to an \"insecure send method.\"","2014-10-06",0.01285,{"cveId":88,"description":89,"publishedDate":85,"cvssScore":90,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":91},"CVE-2014-0140","Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive controllers and actions via a direct HTTP or HTTPS request.",4,0.0124,{"cveId":93,"description":94,"publishedDate":12,"cvssScore":76,"cvssVersion":95,"severity":53,"isKev":17,"epssScore":96},"CVE-2014-7813","Red Hat CloudForms 3 Management Engine (CFME) allows remote authenticated users to cause a denial of service (resource consumption) via vectors involving calls to the .to_sym rails function and lack of garbage collection of inserted symbols.","v3.0",0.01044,{"cveId":98,"description":99,"publishedDate":75,"cvssScore":90,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":100},"CVE-2014-0078","The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing the catalog ID.",0.01019,[],{"title":103,"metaDescription":104,"keywords":105,"structuredData":106},"Cloudforms 3.0 Management Engine by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Cloudforms 3.0 Management Engine by Redhat covering 9 versions with 13 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Cloudforms 3.0 Management Engine vulnerabilities, Cloudforms 3.0 Management Engine security, Cloudforms 3.0 Management Engine CVE, Redhat Cloudforms 3.0 Management Engine, Cloudforms 3.0 Management Engine threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":107,"@type":108,"name":109,"description":104,"url":110,"manufacturer":111,"applicationCategory":115,"softwareVersion":116,"mainEntity":117},"https:\u002F\u002Fschema.org","SoftwareApplication","Cloudforms 3.0 Management Engine","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fcloudforms_3.0_management_engine",{"@type":112,"name":113,"url":114},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","9 versions tracked",{"@type":118,"name":119,"description":120,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Cloudforms 3.0 Management Engine Security Vulnerabilities","Security vulnerabilities affecting Cloudforms 3.0 Management Engine by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":122,"apiVersion":123},"2026-10-17T17:09:20.020Z","3.0",{"rows":125,"total":11,"capped":17,"failed":11},[],[]]