Advisories · Technology

Red Hat CloudForms.

Every CVE that names Red Hat CloudForms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-52903 CVE record

CVSS 8.8 High

YAML safe_load production fallback to unsafe_load enables RCE via deserialization
- ManageIQ
- Red Hat CloudForms
- Insecure deserialization
Not analysed yet 12 Oct 2026
CVE-2014-8164 CVE record

Improper certificate validation in Red Hat CloudForms
- Red Hat CloudForms
- Weak cryptography or TLS
Not analysed yet 6 Jul 2022
CVE-2018-10854 CVE record

CVSS 6.5 Medium

Cross-site scripting in Red Hat cloudforms
- Red Hat cloudforms
- Cross-site scripting (XSS)
Not analysed yet 22 Nov 2019
CVE-2019-10177 CVE record

CVSS 6.5 Medium

Cross-site scripting in Red Hat CloudForms
- Red Hat CloudForms
- Cross-site scripting (XSS)
Not analysed yet 27 Jun 2019
CVE-2017-2653 CVE record

CVSS 4.1 Medium

Improper input validation in Red Hat CloudForms
- Red Hat CloudForms
- CWE-20
Not analysed yet 27 Jul 2018
CVE-2017-15125 CVE record

CVSS 6.5 Medium

Cross-site scripting in Red Hat cloudforms
- Red Hat cloudforms
- Cross-site scripting (XSS)
Not analysed yet 27 Jul 2018
CVE-2017-2664 CVE record

CVSS 6.5 Medium

Improper access control in Red Hat CloudForms
- Red Hat CloudForms
- Broken access control
Not analysed yet 26 Jul 2018