Vendor
oVirt
36 known vulnerabilities in products by oVirt, 1 of them actively exploited (CISA KEV).
Key figures
36
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability In CISA KEValso in 30 other products | 7.8 | |
| High | CVE-2022-0435 | Kernel: Out-of-bounds Write | 8.8 | |
| High | CVE-2014-8170 | oVirt oVirt Node: security vulnerability | 8.8 | |
| High | CVE-2019-3879 | Ovirt-engine: Missing Authorization | 6.5 | |
| High | CVE-2018-1074 | Ovirt-engine: Exposure of Sensitive Information to an Unauthorized Actor | 7.7 | |
| Medium | CVE-2018-1073 | Ovirt-engine: Generation of Error Message Containing Sensitive Information | 5.3 | |
| High | CVE-2017-15113 | Red Hat Ovirt-engine: Improper Removal of Sensitive Information Before Storage or Transfer | 7.2 | |
| Medium | CVE-2018-10908 | Vdsm: Allocation of Resources Without Limits or Throttling | 6.5 | |
| High | CVE-2014-7851 | oVirt: security vulnerability | 7.5 | |
| Medium | CVE-2018-1062 | oVirt: Improper Removal of Sensitive Information Before Storage or Transfer | 5.3 | |
| Critical | CVE-2018-1117 | Ovirt-ansible-roles: Insertion of Sensitive Information into Log File | 5.0 | |
| Medium | CVE-2015-1780 | oVirt: security vulnerability | 6.5 | |
| High | CVE-2024-0822 | Ovirt: authentication bypass | 7.5 | |
| Medium | CVE-2019-3831 | Vdsm: Incorrect Authorization | 6.4 | |
| High | CVE-2012-5518 | Vdsm: security vulnerability | 7.5 | |
| Medium | CVE-2019-19336 | Red Hat Ovirt-engine: Cross-site Scripting | 5.4 | |
| Medium | CVE-2020-35497 | Ovirt-engine: Improper Access Control | 6.5 | |
| Medium | CVE-2020-14333 | The ovirt Project Ovirt-engine: Cross-site Scripting | 6.3 | |
| Critical | CVE-2018-1072 | Ovirt-engine-setup: Insertion of Sensitive Information into Log File | 5.0 | |
| High | CVE-2018-1000018 | oVirt ovirt-hosted-engine-setup: Information Disclosure | 7.8 | |
| Not rated | CVE-2014-0152 | oVirt: Session Fixation | — | |
| Not rated | CVE-2014-0154 | oVirt: security vulnerability | — | |
| High | CVE-2013-0293 | oVirt Node: Privilege Escalation | 7.8 | |
| Medium | CVE-2022-3193 | Ovirt-engine: Cross-site Scripting | 6.1 | |
| High | CVE-2012-4480 | Mom: security vulnerability | 7.8 |
News
Products
| oVirt | 14 | 0 |
| Ovirt Ovirt-engine | 9 | 1 |
| oVirt Vdsm | 4 | 0 |