Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/cfme@5.8.2.3-1?arch=el7cf
purl pkg:rpm/redhat/cfme@5.8.2.3-1?arch=el7cf
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-a11q-3bvq-a3e3
Aliases:
CVE-2017-12148
Tower: modification of git hooks in SCM repo via upstream playbook execution There are no reported fixed by versions.
VCID-e25e-yb1v-qqcw
Aliases:
CVE-2017-11610
GHSA-x7c8-4x3h-874w
PYSEC-2017-41
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:29:18.264785+00:00 RedHat Importer Affected by VCID-e25e-yb1v-qqcw https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11610.json 38.0.0
2026-04-01T14:28:42.509803+00:00 RedHat Importer Affected by VCID-a11q-3bvq-a3e3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12148.json 38.0.0