[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVnKIee6iwANtsR1zO8XEk4C1qDZPjsvmi-cU2CcRzoU":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":73,"kevVulnerabilities":136,"topProductsByCves":142,"seoMetadata":153,"meta":162},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":72},23418,"ovirt",12,33,1,1117,"2024-01-25","o",[16,21,26,32,38,42,46,50,54,59,63,67],{"id":17,"product_name":8,"version_count":18,"cve_count":9,"kev_count":19,"last_cve_update":20},125258,259,0,"2019-07-11",{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":13},125260,"ovirt-engine",331,8,{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":19,"last_cve_update":31},125265,"vdsm",343,4,"2022-08-26",{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":19,"last_cve_update":37},125257,"node",61,2,"2022-03-25",{"id":39,"product_name":40,"version_count":11,"cve_count":11,"kev_count":19,"last_cve_update":41},125256,"mom","2019-12-02",{"id":43,"product_name":44,"version_count":9,"cve_count":11,"kev_count":19,"last_cve_update":45},125259,"ovirt-ansible-roles","2018-06-20",{"id":47,"product_name":48,"version_count":11,"cve_count":11,"kev_count":19,"last_cve_update":49},125255,"log_collector","2022-09-01",{"id":51,"product_name":52,"version_count":19,"cve_count":11,"kev_count":19,"last_cve_update":53},125261,"ovirt-engine-cli","2012-08-31",{"id":55,"product_name":56,"version_count":57,"cve_count":11,"kev_count":19,"last_cve_update":58},125262,"ovirt-hosted-engine-setup",105,"2018-01-24",{"id":60,"product_name":61,"version_count":11,"cve_count":11,"kev_count":19,"last_cve_update":62},125263,"ovirt-node","2017-09-26",{"id":64,"product_name":65,"version_count":19,"cve_count":11,"kev_count":19,"last_cve_update":66},125264,"sanlock","2012-12-20",{"id":68,"product_name":69,"version_count":70,"cve_count":11,"kev_count":19,"last_cve_update":71},125254,"cockpit-ovirt",3,"2019-05-17","Ovirt is a technology vendor with 12 tracked products and 33 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[74,82,88,93,100,106,113,119,125,131],{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":79,"severity":80,"isKev":4,"epssScore":81},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",7.8,"v3.1","High",0.92795,{"cveId":83,"description":84,"publishedDate":37,"cvssScore":85,"cvssVersion":79,"severity":80,"isKev":86,"epssScore":87},"CVE-2022-0435","A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.",8.8,false,0.6777,{"cveId":89,"description":90,"publishedDate":62,"cvssScore":85,"cvssVersion":91,"severity":80,"isKev":86,"epssScore":92},"CVE-2014-8170","ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat Enterprise Virtualization 3 do not properly quote input strings, which allows remote authenticated users and physically proximate attackers to execute arbitrary commands via a ; (semicolon) in an input string.","v3.0",0.0351,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":79,"severity":98,"isKev":86,"epssScore":99},"CVE-2018-1073","The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker to discover the names of valid user accounts.","2018-06-19",5.3,"Medium",0.01883,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":104,"cvssVersion":79,"severity":80,"isKev":86,"epssScore":105},"CVE-2019-3879","It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (eg Basic Operations) could exploit this flaw to delete disks attached to guests.","2019-03-25",8.1,0.0183,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":111,"severity":98,"isKev":86,"epssScore":112},"CVE-2014-0152","Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors.","2014-09-08",6.8,"v2",0.01757,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":111,"severity":98,"isKev":86,"epssScore":118},"CVE-2014-0154","oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.","2015-02-13",5,0.01742,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":91,"severity":80,"isKev":86,"epssScore":124},"CVE-2018-1074","ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts they control.","2018-04-26",7.2,0.01445,{"cveId":126,"description":127,"publishedDate":45,"cvssScore":128,"cvssVersion":91,"severity":129,"isKev":86,"epssScore":130},"CVE-2018-1117","ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ\u002FCloudForms' playbook inadvertently disclosing admin passwords in the provisioning log. In an environment where logs are shared with other parties, this could lead to privilege escalation.",9.8,"Critical",0.01406,{"cveId":132,"description":133,"publishedDate":109,"cvssScore":134,"cvssVersion":111,"severity":98,"isKev":86,"epssScore":135},"CVE-2014-0153","The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page.",4.3,0.01334,[137],{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":79,"severity":80,"isKev":4,"epssScore":81,"cisaVulnName":138,"cisaDateAdded":139,"cisaShortDescription":140,"cisaRequiredAction":141},"Linux Kernel Privilege Escalation Vulnerability","2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"","Apply updates per vendor instructions.",[143,144,145,146,147,148,149,150,151,152],{"id":17,"product_name":8,"version_count":18,"cve_count":9,"kev_count":19,"last_cve_update":20},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":13},{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":19,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":19,"last_cve_update":37},{"id":39,"product_name":40,"version_count":11,"cve_count":11,"kev_count":19,"last_cve_update":41},{"id":43,"product_name":44,"version_count":9,"cve_count":11,"kev_count":19,"last_cve_update":45},{"id":47,"product_name":48,"version_count":11,"cve_count":11,"kev_count":19,"last_cve_update":49},{"id":51,"product_name":52,"version_count":19,"cve_count":11,"kev_count":19,"last_cve_update":53},{"id":55,"product_name":56,"version_count":57,"cve_count":11,"kev_count":19,"last_cve_update":58},{"id":60,"product_name":61,"version_count":11,"cve_count":11,"kev_count":19,"last_cve_update":62},{"title":154,"metaDescription":155,"keywords":156,"structuredData":157},"Ovirt - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Ovirt covering 12 products with 33 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Ovirt vulnerabilities, Ovirt security, Ovirt CVE, Ovirt threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Ovirt KEV, Ovirt exploited vulnerabilities",{"@context":158,"@type":159,"name":160,"description":155,"url":161},"https:\u002F\u002Fschema.org","Organization","Ovirt","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fovirt",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":163,"apiVersion":164},"2026-10-17T19:52:17.591Z","3.0"]