cfme

Direct Vulnerabilities

Known vulnerabilities in the cfme package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
C Server-Side Request Forgery (SSRF)	<0:5.11.7.3-1.el8cf
C Server-Side Request Forgery (SSRF)	<0:5.11.7.3-1.el8cf
C Improper Input Validation	<0:5.11.7.3-1.el8cf
C Improper Input Validation	<0:5.11.7.3-1.el8cf
C Improper Access Control	<0:5.11.7.3-1.el8cf
C Improper Access Control	<0:5.11.7.3-1.el8cf
C Cross-site Scripting (XSS)	<0:5.11.7.3-1.el8cf
C Cross-site Scripting (XSS)	<0:5.11.7.3-1.el8cf
H Insufficient Granularity of Access Control	<0:5.11.10.1-1.el8cf
H Insufficient Granularity of Access Control	<0:5.11.10.1-1.el8cf
M Information Exposure	<0:5.11.6.0-1.el8cf
M Information Exposure	<0:5.11.6.0-1.el8cf
M Missing Required Cryptographic Step	<0:5.11.0.28-1.el8cf
M Missing Required Cryptographic Step	<0:5.11.0.28-1.el8cf
H OS Command Injection	<0:5.11.3.1-1.el8cf
H OS Command Injection	<0:5.11.3.1-1.el8cf
C Improper Authorization	<0:5.11.7.3-1.el8cf
C Improper Authorization	<0:5.11.7.3-1.el8cf
C OS Command Injection	<0:5.11.7.3-1.el8cf
C OS Command Injection	<0:5.11.7.3-1.el8cf
C Privilege Defined With Unsafe Actions	<0:5.11.7.3-1.el8cf
C Privilege Defined With Unsafe Actions	<0:5.11.7.3-1.el8cf
C Trust Boundary Violation	<0:5.11.7.3-1.el8cf
C Trust Boundary Violation	<0:5.11.7.3-1.el8cf
M Cross-site Scripting (XSS)	*
M Resource Exhaustion	<0:5.11.1.2-1.el8cf
M Resource Exhaustion	<0:5.11.1.2-1.el8cf
M Cross-site Scripting (XSS)	<0:5.11.0.28-1.el8cf
M Cross-site Scripting (XSS)	<0:5.11.0.28-1.el8cf