[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fn7_kje4cFhHNyhhsEAa5ArC1qSwVoF7UcUNCZaX79PY":3,"g5a-ex:redhat\u002Fcloudforms_management_engine@*":193,"g5a-family:redhat\u002Fcloudforms_management_engine":195},{"success":4,"data":5},true,{"product":6,"versions":78,"topVulnerabilitiesByEpss":108,"kevVulnerabilities":170,"seoMetadata":171,"meta":190},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":77},"redhat","cloudforms_management_engine",29,42,0,"2022-07-06",[14,18,20,23,26,28,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.0",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"4.1",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"4.7",3,{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"5.0",17,{"version":27,"cve_count":22,"kev_count":11,"has_kev":17},"5.1",{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},"5.10",2,{"version":32,"cve_count":16,"kev_count":11,"has_kev":17},"5.11",{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"5.11.7.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"5.2",{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},"5.3",{"version":40,"cve_count":16,"kev_count":11,"has_kev":17},"5.4.4",{"version":42,"cve_count":16,"kev_count":11,"has_kev":17},"5.5.0",{"version":44,"cve_count":16,"kev_count":11,"has_kev":17},"5.6",{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},"5.6.3",{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},"5.6.3.0",{"version":50,"cve_count":16,"kev_count":11,"has_kev":17},"5.7",{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},"5.7.0",{"version":54,"cve_count":11,"kev_count":11,"has_kev":17},"5.7.1",{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},"5.7.1.3",{"version":58,"cve_count":16,"kev_count":11,"has_kev":17},"5.7.2",{"version":60,"cve_count":11,"kev_count":11,"has_kev":17},"5.7.2.1",{"version":62,"cve_count":11,"kev_count":11,"has_kev":17},"5.7.3",{"version":64,"cve_count":11,"kev_count":11,"has_kev":17},"5.7.3.1",{"version":66,"cve_count":22,"kev_count":11,"has_kev":17},"5.8",{"version":68,"cve_count":16,"kev_count":11,"has_kev":17},"5.8.0",{"version":70,"cve_count":11,"kev_count":11,"has_kev":17},"5.8.1",{"version":72,"cve_count":11,"kev_count":11,"has_kev":17},"5.8.1.2",{"version":74,"cve_count":22,"kev_count":11,"has_kev":17},"5.9",{"version":76,"cve_count":11,"kev_count":11,"has_kev":17},"5.9.3.1","Cloudforms Management Engine by Redhat is a technology product with 29 tracked versions and 42 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":22,"kev_count":11,"has_kev":17},{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},{"version":32,"cve_count":16,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},{"version":40,"cve_count":16,"kev_count":11,"has_kev":17},{"version":42,"cve_count":16,"kev_count":11,"has_kev":17},{"version":44,"cve_count":16,"kev_count":11,"has_kev":17},{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},{"version":50,"cve_count":16,"kev_count":11,"has_kev":17},{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},{"version":54,"cve_count":11,"kev_count":11,"has_kev":17},{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},{"version":58,"cve_count":16,"kev_count":11,"has_kev":17},{"version":60,"cve_count":11,"kev_count":11,"has_kev":17},{"version":62,"cve_count":11,"kev_count":11,"has_kev":17},{"version":64,"cve_count":11,"kev_count":11,"has_kev":17},{"version":66,"cve_count":22,"kev_count":11,"has_kev":17},{"version":68,"cve_count":16,"kev_count":11,"has_kev":17},{"version":70,"cve_count":11,"kev_count":11,"has_kev":17},{"version":72,"cve_count":11,"kev_count":11,"has_kev":17},{"version":74,"cve_count":22,"kev_count":11,"has_kev":17},{"version":76,"cve_count":11,"kev_count":11,"has_kev":17},[109,117,124,131,138,144,149,154,161,166],{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"cvssVersion":114,"severity":115,"isKev":17,"epssScore":116},"CVE-2013-2068","Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite arbitrary files via a .. (dot dot) in the filename parameter to the (1) log, (2) upload, or (3) linuxpkgs method.","2013-09-28",9.4,"v2","Critical",0.58624,{"cveId":118,"description":119,"publishedDate":120,"cvssScore":121,"cvssVersion":114,"severity":122,"isKev":17,"epssScore":123},"CVE-2013-2050","SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.","2014-01-11",7.5,"High",0.15659,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"cvssVersion":129,"severity":122,"isKev":17,"epssScore":130},"CVE-2016-5402","A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.","2018-10-31",8.8,"v3.0",0.05931,{"cveId":132,"description":133,"publishedDate":134,"cvssScore":135,"cvssVersion":136,"severity":122,"isKev":17,"epssScore":137},"CVE-2019-14894","A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root.","2020-06-22",7.2,"v3.1",0.04078,{"cveId":139,"description":140,"publishedDate":141,"cvssScore":142,"cvssVersion":136,"severity":115,"isKev":17,"epssScore":143},"CVE-2020-14324","A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker while setuping conversion host through Infrastructure Migration Solution. This flaw allows attacker to execute arbitrary commands on CloudForms server.","2020-08-11",9.1,0.02515,{"cveId":145,"description":146,"publishedDate":147,"cvssScore":128,"cvssVersion":129,"severity":122,"isKev":17,"epssScore":148},"CVE-2016-7040","Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections.","2016-10-07",0.02256,{"cveId":150,"description":151,"publishedDate":152,"cvssScore":128,"cvssVersion":129,"severity":122,"isKev":17,"epssScore":153},"CVE-2016-7071","It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. A remote, authenticated attacker could use this flaw to execute arbitrary VMs on systems managed by CloudForms if they know the ID of the VM.","2018-09-10",0.02197,{"cveId":155,"description":156,"publishedDate":157,"cvssScore":158,"cvssVersion":136,"severity":159,"isKev":17,"epssScore":160},"CVE-2013-6461","Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits","2019-11-05",6.5,"Medium",0.02194,{"cveId":162,"description":163,"publishedDate":164,"cvssScore":121,"cvssVersion":136,"severity":122,"isKev":17,"epssScore":165},"CVE-2012-6685","Nokogiri before 1.5.4 is vulnerable to XXE attacks","2020-02-19",0.02168,{"cveId":167,"description":168,"publishedDate":157,"cvssScore":158,"cvssVersion":136,"severity":159,"isKev":17,"epssScore":169},"CVE-2013-6460","Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents",0.02083,[],{"title":172,"metaDescription":173,"keywords":174,"structuredData":175},"Cloudforms Management Engine by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Cloudforms Management Engine by Redhat covering 29 versions with 42 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Cloudforms Management Engine vulnerabilities, Cloudforms Management Engine security, Cloudforms Management Engine CVE, Redhat Cloudforms Management Engine, Cloudforms Management Engine threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":176,"@type":177,"name":178,"description":173,"url":179,"manufacturer":180,"applicationCategory":184,"softwareVersion":185,"mainEntity":186},"https:\u002F\u002Fschema.org","SoftwareApplication","Cloudforms Management Engine","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fcloudforms_management_engine",{"@type":181,"name":182,"url":183},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","29 versions tracked",{"@type":187,"name":188,"description":189,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Cloudforms Management Engine Security Vulnerabilities","Security vulnerabilities affecting Cloudforms Management Engine by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":191,"apiVersion":192},"2026-10-17T10:53:46.906Z","3.0",{"rows":194,"total":11,"capped":17,"failed":11},[],[]]