Unknown Cloudforms vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Cloudforms, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2017-2639redhatcloudforms+2
EPSS score
1.12%
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.9CVE-2019-14894redhatcloudforms_management_engine+10
EPSS score
4.08%
A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root.