https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:16:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-03899 bdu:2020-03899 https://cve.radiocsirt.org/vuln/bdu:2020-03899 https://cve.radiocsirt.org/vuln/cnvd-2020-44412 cnvd-2020-44412 https://cve.radiocsirt.org/vuln/cnvd-2020-44412 https://cve.radiocsirt.org/vuln/euvd-2026-42361 EUVD-2026-42361 https://cve.radiocsirt.org/vuln/euvd-2026-42361 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14325 <p>Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with groups and roles. With a selected group of EvmGroup-super_administrator, an attacker can perform any API request as a super administrator.</p> <p>Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with groups and roles. With a selected group of EvmGroup-super_administrator, an attacker can perform any API request as a super administrator.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-14325 https://cve.radiocsirt.org/vuln/gsd-2020-14325 gsd-2020-14325 https://cve.radiocsirt.org/vuln/gsd-2020-14325 https://cve.radiocsirt.org/vuln/rhsa-2020:3358 <p>CloudForms: Cross Site Scripting in report menu title / HTML Code Injection CloudForms: Business logic bypass through widgets CloudForms: Missing functional level access control &amp; IDOR lead to compromise CloudForms: CSV Injection in Orchestration Templates CloudForms: Missing access control leads to escalation of admin group privileges CloudForms: Server-Side Request Forgery (SSRF) in Ansible Tower Provider CloudForms: Out-of-band OS Command Injection through conversion host CloudForms: User Impersonation in the API for OIDC and SAML</p> <p>CloudForms: Cross Site Scripting in report menu title / HTML Code Injection CloudForms: Business logic bypass through widgets CloudForms: Missing functional level access control &amp; IDOR lead to compromise CloudForms: CSV Injection in Orchestration Templates CloudForms: Missing access control leads to escalation of admin group privileges CloudForms: Server-Side Request Forgery (SSRF) in Ansible Tower Provider CloudForms: Out-of-band OS Command Injection through conversion host CloudForms: User Impersonation in the API for OIDC and SAML</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3358