Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how ovirt compares to other vendors in security performance

View Risk Score →

Ovirt oVirt EngineOvirt-engine: potential exposure of cleartext provider passwords via web ui

Risk 30
Severity
4.9
First published (updated )
CVE-2024-7259

Ovirt Ovirt-engineOvirt: authentication bypass

Risk 31
Severity
7.5
EPSS
0.05%
First published (updated )
CVE-2024-0822

Ovirt oVirt EngineXSS

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2258509

Ovirt Ovirt-engineXSS, Input Validation

Risk 39
Severity
6.1
First published (updated )
CVE-2022-3193

redhat/ovirt-log-collectorInfoleak

Risk 34
Severity
5.5
First published (updated )
CVE-2022-2806
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/kernelLinux Kernel Privilege Escalation Vulnerability

Risk 88
Severity
7.8
Exploited
First published (updated )
CVE-2022-0847

Linux Linux kernelLast updated 25 April 2025

Risk 81
Severity
9
First published (updated )
CVE-2022-0435

Ovirt vdsmRace Condition

Risk 28
Severity
4.7
First published (updated )
CVE-2022-0207

redhat/ovirt-engineInfoleak

Risk 38
Severity
6.5
First published (updated )
CVE-2020-35497

Ovirt Ovirt-engineXSS

Risk 46
Severity
6.3
First published (updated )
CVE-2020-14333
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ovirt EngineOvirt Engine's web interface in ovirt 4.4.2 and earlier does not filter user controllable parameters…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-1858184

debianoVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation

Risk 69
Severity
7.8
First published (updated )
CVE-2013-0293

redhat/ovirt-engine-dwhXSS

Risk 39
Severity
6.1
First published (updated )
CVE-2019-19336

Fedoraproject Fedoramom creates world-writable pid files in /var/run

Risk 69
Severity
7.8
First published (updated )
CVE-2012-4480

Ovirt vdsmvdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyon…

Risk 43
Severity
7.5
First published (updated )
CVE-2012-5518
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ovirt Ovirt-engineovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to …

Risk 69
Severity
7.8
First published (updated )
CVE-2013-4367

Ovirt oVirtSensitive passwords used in deployment and configuration of oVirt Metrics were found to be insuffici…

Risk 33
Severity
5.9
First published (updated )
CVE-2019-10194

redhat/cockpit-ovirtDuring HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `/var/lib/o…

Risk 71
Severity
7.8
First published (updated )
CVE-2019-10139

Ovirt oVirtIt was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggere…

Risk 60
Severity
8.1
First published (updated )
CVE-2019-3879

Ovirt vdsmA vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The s…

Risk 78
Severity
9
First published (updated )
CVE-2019-3831
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ovirt vdsmInput Validation

Risk 39
Severity
7.1
First published (updated )
CVE-2018-10908

maven/org.ovirt.engine.sdk:ovirt-engine-sdk-javaovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file w…

Risk 57
Severity
7.2
First published (updated )
CVE-2017-15113

Ovirt oVirtovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. …

Risk 86
Severity
9.8
First published (updated )
CVE-2018-1072

redhat/ovirt-ansible-rolesDue to a missing no_log directive, the 'Add oVirt Provider to ManageIQ/CloudForms' playbook inadvert…

Risk 86
Severity
9.8
First published (updated )
CVE-2018-1117

Ovirt oVirtInfoleak

Risk 44
Severity
7.7
First published (updated )
CVE-2018-1074
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/ovirt-engineInfoleak

Risk 27
Severity
5.3
First published (updated )
CVE-2018-1073

Ovirt oVirtA flaw was found in ovirt-engine. When engine-setup is run and one chooses to provision the database…

Risk 69
Severity
7.8
First published (updated )
CVE-2018-1075

Ovirt ovirt-hosted-engine-setupAn information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's passwo…

Risk 69
Severity
7.8
First published (updated )
CVE-2018-1000018

Ovirt guest-agent-dockerImportant: ovirt-guest-agent-docker security and bug fix update

Risk 32
First published (updated )
Advisory
RHSA-2018:0049

Ovirt oVirt EngineWhen ovirt-engine-provisiondb, a utility usually called by engine-backup, was passed one of the '--p…

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-1371428
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203