redhat enterprise virtualization

Name: redhat enterprise virtualization
Brand: redhat

productUS

cpe:2.3:a:redhat:enterprise_virtualization:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical8high18medium8low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-1111US	high7.5	97.9% (100th)	Exploit	no fix	2018-05-17	2 versions
CVE-2015-3456US	high7.7	15.3% (97th)	Exploit	no fix	2015-05-13	= 3.0
CVE-2008-3522US	high10.0	4.51% (91st)	—	no fix	2008-10-02	= 3.5
CVE-2013-1591US	critical9.8	3.63% (89th)	—	no fix	2013-01-31	= 3.0
CVE-2012-3406US	medium6.8	3.16% (88th)	—	no fix	2014-02-10	= 3.0
CVE-2013-4282US	medium5.0	2.73% (86th)	—	no fix	2013-11-02	= 3.0
CVE-2012-3404US	medium5.0	2.23% (83rd)	—	no fix	2014-02-10	= 3.0
CVE-2012-3405US	medium5.0	2.09% (81st)	—	no fix	2014-02-10	= 3.0
CVE-2014-3485US	medium4.0	1.48% (74th)	—	no fix	2014-07-11	= 3.4
CVE-2015-5201US	high7.5OT elevated	1.46% (73rd)	—	3.5.6	2020-02-25	< 3.5.6
CVE-2018-1074US	high7.2	1.44% (73rd)	—	no fix	2018-04-26	= 4.0
CVE-2014-3559US	low3.5	1.44% (73rd)	—	no fix	2014-08-06	= 3.4
CVE-2013-4181US	medium4.3	1.41% (73rd)	—	no fix	2013-09-16	2 versions
CVE-2010-2811US	medium5.7	1.00% (62nd)	—	no fix	2010-08-24	= 2.2
CVE-2014-8167US	medium5.9	0.73% (54th)	—	no fix	2019-11-13	= 3.0
CVE-2013-0167US	low2.7	0.56% (47th)	—	no fix	2013-08-19	2 versions
CVE-2014-0179US	low1.9	0.56% (46th)	—	no fix	2014-08-03	= 3.0
CVE-2013-4236US	low2.7	0.56% (46th)	—	no fix	2013-08-19	2 versions
CVE-2014-5177US	low1.2	0.53% (45th)	—	no fix	2014-08-03	= 3.0
CVE-2016-6338US	medium6.8	0.52% (44th)	—	no fix	2017-04-20	= 4.0
CVE-2013-2176US	high7.2	0.46% (40th)	—	no fix	2013-08-28	2 versions
CVE-2013-4280US	medium5.5	0.42% (36th)	—	no fix	2019-11-04	= 3.0
CVE-2013-2152US	high7.2	0.41% (36th)	—	no fix	2014-01-21	= 3.2
CVE-2013-2151US	high7.2	0.41% (36th)	—	no fix	2014-01-21	2 versions
CVE-2014-3561US	low2.1	0.38% (31st)	—	no fix	2014-12-05	= 3.4
CVE-2010-0435US	medium4.6	0.36% (29th)	—	no fix	2010-08-24	= 2.2
CVE-2016-6310US	medium5.5	0.36% (29th)	—	no fix	2017-08-22	≤ 3.6
CVE-2016-5432US	low3.3OT elevated	0.35% (28th)	—	no fix	2016-10-03	= 4.0
CVE-2015-1841US	low3.7	0.33% (25th)	—	no fix	2015-09-08	= 3.0
CVE-2010-0431US	medium6.6	0.31% (24th)	—	no fix	2010-08-24	= 2.2
CVE-2010-0429US	medium6.6	0.31% (24th)	—	no fix	2010-08-24	= 2.2
CVE-2010-0428US	medium6.6	0.31% (24th)	—	no fix	2010-08-24	= 2.2
CVE-2017-2614US	medium6.3	0.28% (20th)	—	no fix	2018-07-27	= 4.0
CVE-2010-2784US	medium6.6	0.28% (20th)	—	no fix	2010-08-24	= 2.2
CVE-2016-4443US	medium5.5	0.24% (14th)	—	no fix	2016-12-14	= 3.6

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation8 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-264CWE-2644 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-611Improper Restriction of XML External Entity Reference3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-189CWE-1892 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan