[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9Bak5oo53gIxVW21mkhXWGmV2oAKz1SRT5zl9lbq6jk":3,"g5a-ex:redhat\u002Fenterprise_virtualization_manager@*":144,"g5a-family:redhat\u002Fenterprise_virtualization_manager":146},{"success":4,"data":5},true,{"product":6,"versions":45,"topVulnerabilitiesByEpss":58,"kevVulnerabilities":122,"seoMetadata":123,"meta":142},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":44},"redhat","enterprise_virtualization_manager",12,19,0,"2019-11-09",[14,18,21,24,27,30,32,34,36,38,40,42],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.1",10,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"2.2",11,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"2.2.3",9,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"2.2.4",1,{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},"3.0",5,{"version":31,"cve_count":26,"kev_count":11,"has_kev":17},"3.1",{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},"3.2",{"version":35,"cve_count":26,"kev_count":11,"has_kev":17},"3.4",{"version":37,"cve_count":26,"kev_count":11,"has_kev":17},"3.4.1",{"version":39,"cve_count":26,"kev_count":11,"has_kev":17},"3.5.0",{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},"3.6.0",{"version":43,"cve_count":26,"kev_count":11,"has_kev":17},"4.2","Enterprise Virtualization Manager by Redhat is a technology product with 12 tracked versions and 19 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[46,47,48,49,50,51,52,53,54,55,56,57],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},{"version":31,"cve_count":26,"kev_count":11,"has_kev":17},{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},{"version":35,"cve_count":26,"kev_count":11,"has_kev":17},{"version":37,"cve_count":26,"kev_count":11,"has_kev":17},{"version":39,"cve_count":26,"kev_count":11,"has_kev":17},{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},{"version":43,"cve_count":26,"kev_count":11,"has_kev":17},[59,67,74,82,88,94,100,105,110,116],{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":17,"epssScore":66},"CVE-2018-8897","A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL \u003C 3, the debug exception is delivered after the transfer to CPL \u003C 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs.","2018-05-08",7.8,"v3.0","High",0.18485,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":64,"severity":72,"isKev":17,"epssScore":73},"CVE-2015-7544","redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows remote authenticated users with the SuperUser role on any Entity to execute arbitrary commands on any host in the RHEV environment.","2017-09-25",9.1,"Critical",0.03438,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":81},"CVE-2013-0168","The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which allows remote authenticated storage admins to cause a denial of service (free space consumption of other storage domains) via unspecified vectors.","2013-03-12",4,"v2","Medium",0.01919,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":64,"severity":80,"isKev":17,"epssScore":87},"CVE-2015-5293","Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when \"boot protocol\" is set to None, which might allow remote attackers to communicate with a system designated to be unreachable.","2017-08-24",5.9,0.01885,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":93},"CVE-2014-3573","The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an \"insecure DocumentBuilderFactory,\" which allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML\u002FRSDL document, related to an XML External Entity (XXE) issue.","2014-10-18",6.5,0.01762,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":99},"CVE-2015-0237","Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain.","2015-05-01",6.8,0.01579,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":29,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":104},"CVE-2013-2144","Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.","2013-07-03",0.01244,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":98,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":109},"CVE-2010-2793","Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.","2010-12-08",0.01018,{"cveId":111,"description":112,"publishedDate":113,"cvssScore":114,"cvssVersion":64,"severity":72,"isKev":17,"epssScore":115},"CVE-2018-1072","ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engine-backup was run with one of the options \"--provision*db\", the database username and password were logged in cleartext. Sharing the provisioning log might inadvertently leak database passwords.","2018-06-26",9.8,0.00994,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":120,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":121},"CVE-2013-6434","The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client invocation method, initially makes insecure connections to the SPICE server, which allows man-in-the-middle attackers to spoof the SPICE server.","2014-01-24",4.3,0.00968,[],{"title":124,"metaDescription":125,"keywords":126,"structuredData":127},"Enterprise Virtualization Manager by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Virtualization Manager by Redhat covering 12 versions with 19 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Virtualization Manager vulnerabilities, Enterprise Virtualization Manager security, Enterprise Virtualization Manager CVE, Redhat Enterprise Virtualization Manager, Enterprise Virtualization Manager threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":128,"@type":129,"name":130,"description":125,"url":131,"manufacturer":132,"applicationCategory":136,"softwareVersion":137,"mainEntity":138},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Virtualization Manager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fenterprise_virtualization_manager",{"@type":133,"name":134,"url":135},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","12 versions tracked",{"@type":139,"name":140,"description":141,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Virtualization Manager Security Vulnerabilities","Security vulnerabilities affecting Enterprise Virtualization Manager by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":143,"apiVersion":28},"2026-10-18T00:01:29.577Z",{"rows":145,"total":11,"capped":17,"failed":11},[],[]]