cfme-vnc-plugin-debuginfo-0:1.0.0-2.el6cf.x86_64 as a component of CloudForms Management Engine 5.4

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical0high3medium1low

updated 2026-10-27

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-1820US	critical9.8	4.35% (91st)	—	no fix	2017-08-09	—
CVE-2014-7819US	medium5.0	3.89% (90th)	—	no fix	2014-11-08	—
CVE-2013-4389US	medium4.3	3.14% (88th)	—	no fix	2013-10-17	—
CVE-2013-4492US	medium4.3	2.23% (83rd)	—	no fix	2013-12-07	—
CVE-2015-3448US	low2.1	0.37% (31st)	—	no fix	2015-04-29	—

The flaw types (CWEs) most of these CVEs share.

CWE-134Use of Externally-Controlled Format String1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-384Session Fixation1 CVEs
CWE-532Insertion of Sensitive Information into Log File1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.