Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/cfme@5.2.2.3-1?arch=el6cf
purl pkg:rpm/redhat/cfme@5.2.2.3-1?arch=el6cf
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-1bdw-9rs5-6ycg
Aliases:
CVE-2013-4164
GHSA-j98q-m2w8-57rc
OSV-100113
several There are no reported fixed by versions.
VCID-3wtf-uu89-2qe5
Aliases:
CVE-2014-0081
GHSA-m46p-ggm5-5j83
OSV-103439
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper. There are no reported fixed by versions.
VCID-bv8s-3wu9-mfa8
Aliases:
CVE-2014-0057
CFME: Dangerous send in ServiceController There are no reported fixed by versions.
VCID-er1e-c57c-t3fk
Aliases:
CVE-2013-0186
EVM: Stored XSS There are no reported fixed by versions.
VCID-mep3-6sub-ykdk
Aliases:
CVE-2014-0082
GHSA-7cgp-c3g7-qvrw
OSV-103440
Denial of Service Vulnerability when using render :text Strings sent in specially crafted headers will be converted to symbols. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:49:26.995428+00:00 RedHat Importer Affected by VCID-1bdw-9rs5-6ycg https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4164.json 38.0.0
2026-04-01T14:48:46.814402+00:00 RedHat Importer Affected by VCID-mep3-6sub-ykdk https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0082.json 38.0.0
2026-04-01T14:48:46.647630+00:00 RedHat Importer Affected by VCID-3wtf-uu89-2qe5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0081.json 38.0.0
2026-04-01T14:48:37.374155+00:00 RedHat Importer Affected by VCID-er1e-c57c-t3fk https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0186.json 38.0.0
2026-04-01T14:48:37.176703+00:00 RedHat Importer Affected by VCID-bv8s-3wu9-mfa8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0057.json 38.0.0