VYPR
← All advisories
Medium severity4.8OSV Advisory· Published Mar 13, 2018· Updated Jun 17, 2026

CVE-2018-1000095

CVE-2018-1000095

Description

oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting (XSS) vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3.

Affected products

3
  • Ovirt/Ovirtllm-fuzzy
    Range: <=4.2.2
  • Ovirt/EngineOSV
    Range: ovirt-engine-4.2.0, ovirt-engine-4.2.0.1, ovirt-engine-4.2.0.2, …
  • Red Hat/Ovirt Engine
    cpe:2.3:a:redhat:ovirt-engine:*:*:*:*:*:*:*:*
    Range: >=4.2.0,<=4.2.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.