High severity8.8NVD Advisory· Published Oct 7, 2016· Updated May 6, 2026
CVE-2016-7040
CVE-2016-7040
Description
Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- rhn.redhat.com/errata/RHSA-2016-1996.htmlnvdMitigationVendor Advisory
- www.securityfocus.com/bid/93893nvd
News mentions
0No linked articles in our index yet.