Product by oVirt
Ovirt Ovirt-engine
17 known vulnerabilities in Ovirt Ovirt-engine (oVirt), 1 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability In CISA KEValso in 30 other products | 7.8 | |
| High | CVE-2019-3879 | Ovirt-engine: Missing Authorization | 6.5 | |
| High | CVE-2018-1074 | Ovirt-engine: Exposure of Sensitive Information to an Unauthorized Actor | 7.7 | |
| Medium | CVE-2018-1073 | Ovirt-engine: Generation of Error Message Containing Sensitive Information | 5.3 | |
| High | CVE-2017-15113 | Red Hat Ovirt-engine: Improper Removal of Sensitive Information Before Storage or Transfer | 7.2 | |
| High | CVE-2014-7851 | oVirt: security vulnerability | 7.5 | |
| Medium | CVE-2018-1062 | oVirt: Improper Removal of Sensitive Information Before Storage or Transfer | 5.3 | |
| Medium | CVE-2015-1780 | oVirt: security vulnerability | 6.5 | |
| High | CVE-2024-0822 | Ovirt: authentication bypass | 7.5 | |
| Medium | CVE-2019-19336 | Red Hat Ovirt-engine: Cross-site Scripting | 5.4 | |
| Medium | CVE-2020-35497 | Ovirt-engine: Improper Access Control | 6.5 | |
| Medium | CVE-2020-14333 | The ovirt Project Ovirt-engine: Cross-site Scripting | 6.3 | |
| Not rated | CVE-2014-0152 | oVirt: Session Fixation | — | |
| Medium | CVE-2022-3193 | Ovirt-engine: Cross-site Scripting | 6.1 | |
| High | CVE-2013-4367 | Ovirt-engine: security vulnerability | 7.8 | |
| Medium | CVE-2024-7259 | Ovirt-engine: potential exposure of cleartext provider passwords via web ui | 4.9 | |
| High | CVE-2018-1075 | Ovirt-engine: Insertion of Sensitive Information into Log File | 5.0 |