https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T02:51:51.247373+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-03899 bdu:2020-03899 2026-10-05T02:51:51.332166+00:00 bdu:2020-03899 https://cve.radiocsirt.org/vuln/cnvd-2020-44412 cnvd-2020-44412 2026-10-05T02:51:51.332205+00:00 cnvd-2020-44412 https://cve.radiocsirt.org/vuln/euvd-2026-42361 EUVD-2026-42361 2026-10-05T02:51:51.332220+00:00 EUVD-2026-42361 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14325 fkie_cve-2020-14325 2026-10-05T02:51:51.332232+00:00

Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with groups and roles. With a selected group of EvmGroup-super_administrator, an attacker can perform any API request as a super administrator.

 https://cve.radiocsirt.org/vuln/gsd-2020-14325 gsd-2020-14325 2026-10-05T02:51:51.332263+00:00 gsd-2020-14325 https://cve.radiocsirt.org/vuln/rhsa-2020:3358 RHSA-2020:3358 — Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update 2026-10-05T02:51:51.332275+00:00

CloudForms: Cross Site Scripting in report menu title / HTML Code Injection CloudForms: Business logic bypass through widgets CloudForms: Missing functional level access control & IDOR lead to compromise CloudForms: CSV Injection in Orchestration Templates CloudForms: Missing access control leads to escalation of admin group privileges CloudForms: Server-Side Request Forgery (SSRF) in Ansible Tower Provider CloudForms: Out-of-band OS Command Injection through conversion host CloudForms: User Impersonation in the API for OIDC and SAML