https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:39:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-03904 bdu:2020-03904 https://cve.radiocsirt.org/vuln/bdu:2020-03904 https://cve.radiocsirt.org/vuln/cnvd-2020-44410 cnvd-2020-44410 https://cve.radiocsirt.org/vuln/cnvd-2020-44410 https://cve.radiocsirt.org/vuln/euvd-2026-42327 EUVD-2026-42327 https://cve.radiocsirt.org/vuln/euvd-2026-42327 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14296 <p>Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal network which are not normally accessible.</p> <p>Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal network which are not normally accessible.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-14296 https://cve.radiocsirt.org/vuln/gsd-2020-14296 gsd-2020-14296 https://cve.radiocsirt.org/vuln/gsd-2020-14296 https://cve.radiocsirt.org/vuln/rhsa-2020:3358 <p>CloudForms: Cross Site Scripting in report menu title / HTML Code Injection CloudForms: Business logic bypass through widgets CloudForms: Missing functional level access control &amp; IDOR lead to compromise CloudForms: CSV Injection in Orchestration Templates CloudForms: Missing access control leads to escalation of admin group privileges CloudForms: Server-Side Request Forgery (SSRF) in Ansible Tower Provider CloudForms: Out-of-band OS Command Injection through conversion host CloudForms: User Impersonation in the API for OIDC and SAML</p> <p>CloudForms: Cross Site Scripting in report menu title / HTML Code Injection CloudForms: Business logic bypass through widgets CloudForms: Missing functional level access control &amp; IDOR lead to compromise CloudForms: CSV Injection in Orchestration Templates CloudForms: Missing access control leads to escalation of admin group privileges CloudForms: Server-Side Request Forgery (SSRF) in Ansible Tower Provider CloudForms: Out-of-band OS Command Injection through conversion host CloudForms: User Impersonation in the API for OIDC and SAML</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3358