Product by Red Hat
oVirt
18 known vulnerabilities in oVirt (Red Hat), 1 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability In CISA KEValso in 31 other products | 7.8 | |
| Medium | CVE-2016-3113 | [UNKNOWN] RHV: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2019-3879 | Ovirt-engine: Missing Authorization | 6.5 | |
| High | CVE-2018-1074 | Ovirt-engine: Exposure of Sensitive Information to an Unauthorized Actor | 7.7 | |
| Medium | CVE-2020-10775 | Ovirt-engine: User Interface (UI) Misrepresentation of Critical Information | 5.3 | |
| High | CVE-2017-7510 | RHV: Exposure of Sensitive Information to an Unauthorized Actor | 8.8 | |
| Medium | CVE-2018-1073 | Ovirt-engine: Generation of Error Message Containing Sensitive Information | 5.3 | |
| High | CVE-2017-15113 | Red Hat Ovirt-engine: Improper Removal of Sensitive Information Before Storage or Transfer | 7.2 | |
| High | CVE-2014-7851 | oVirt: security vulnerability | 7.5 | |
| Medium | CVE-2018-1062 | oVirt: Improper Removal of Sensitive Information Before Storage or Transfer | 5.3 | |
| Medium | CVE-2015-1780 | oVirt: security vulnerability | 6.5 | |
| Medium | CVE-2016-3077 | [UNKNOWN] RHV: Denial of Service | 6.5 | |
| Medium | CVE-2019-19336 | Red Hat Ovirt-engine: Cross-site Scripting | 5.4 | |
| Medium | CVE-2020-35497 | Ovirt-engine: Improper Access Control | 6.5 | |
| Not rated | CVE-2014-0152 | oVirt: Session Fixation | — | |
| Medium | CVE-2022-2805 | Ovirt-engine: Cleartext Storage of Sensitive Information | 6.5 | |
| Medium | CVE-2018-1000095 | [UNKNOWN] RHV: Cross-Site Scripting (XSS) | 4.8 | |
| Not rated | CVE-2014-0151 | [UNKNOWN] RHV: Cross-Site Request Forgery (CSRF) | — |