ovirt ovirt

Name: ovirt ovirt
Brand: ovirt

productUS

cpe:2.3:a:ovirt:ovirt:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical4high7medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-3879US	high8.1OT elevated	1.83% (79th)	—	4.3.2.1	2019-03-25	< 4.3.2.1
CVE-2014-0152US	medium6.8	1.76% (78th)	—	no fix	2014-09-08	≤ 3.4.0
CVE-2014-0154US	medium5.0	1.74% (78th)	—	no fix	2015-02-13	≤ 3.4.4
CVE-2018-1074US	high7.2	1.44% (73rd)	—	no fix	2018-04-26	≤ 4.1.11.1
CVE-2014-0153US	medium4.3	1.33% (71st)	—	no fix	2014-09-08	≤ 3.4.0
CVE-2017-15113US	medium6.6	1.15% (67th)	—	4.1.7.6	2018-07-27	< 4.1.7.6
CVE-2012-3533US	medium5.0	1.07% (65th)	—	no fix	2012-08-31	= 3.1
CVE-2014-7851US	high7.5	1.00% (63rd)	—	no fix	2017-10-16	2 versions
CVE-2018-1072US	critical9.8	0.99% (63rd)	—	4.2.2	2018-06-26	< 4.2.2
CVE-2018-1075US	high7.8	0.35% (28th)	—	4.2.3	2018-06-12	< 4.2.3
CVE-2016-6341US	medium5.5	0.35% (28th)	—	no fix	2017-04-20	≤ 4.0.2
CVE-2019-10194US	medium5.5	0.34% (28th)	—	no fix	2019-07-11	—

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-532Insertion of Sensitive Information into Log File4 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-212Improper Removal of Sensitive Information Before Storage or Transfer1 CVEs
CWE-264CWE-2641 CVEs
CWE-310CWE-3101 CVEs
CWE-384Session Fixation1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.