https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T03:18:25.459521+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-03903 bdu:2020-03903 2026-10-05T03:18:25.465670+00:00 bdu:2020-03903 https://cve.radiocsirt.org/vuln/cnvd-2020-44409 cnvd-2020-44409 2026-10-05T03:18:25.465706+00:00 cnvd-2020-44409 https://cve.radiocsirt.org/vuln/euvd-2026-40095 EUVD-2026-40095 2026-10-05T03:18:25.465720+00:00 EUVD-2026-40095 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10777 fkie_cve-2020-10777 2026-10-05T03:18:25.465731+00:00

A cross-site scripting flaw was found in Report Menu feature of Red Hat CloudForms 4.7 and 5. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms.

 https://cve.radiocsirt.org/vuln/gsd-2020-10777 gsd-2020-10777 2026-10-05T03:18:25.465757+00:00 gsd-2020-10777 https://cve.radiocsirt.org/vuln/rhsa-2020:3358 RHSA-2020:3358 — Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update 2026-10-05T03:18:25.465768+00:00

CloudForms: Cross Site Scripting in report menu title / HTML Code Injection CloudForms: Business logic bypass through widgets CloudForms: Missing functional level access control & IDOR lead to compromise CloudForms: CSV Injection in Orchestration Templates CloudForms: Missing access control leads to escalation of admin group privileges CloudForms: Server-Side Request Forgery (SSRF) in Ansible Tower Provider CloudForms: Out-of-band OS Command Injection through conversion host CloudForms: User Impersonation in the API for OIDC and SAML