5 results · Clear filters · Feed
-
Medium 6.5
cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in Clo…
-
Medium 6.5
A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and…
-
Medium 4.1
A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instea…
-
Medium 6.5
A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not prop…
-
Medium 6.5
CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the r…