RHSA-2022:6393HighCVSS 7.5

Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update

Published
September 8, 2022
Last Modified
June 13, 2026

🔗 CVE IDs covered (6)

CVE-2020-11023 →CVE-2021-22096 →CVE-2021-23358 →CVE-2022-2806 →CVE-2022-31129 →CVE-2020-11022 →

📋 Description

CVE-2020-11022 — jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method CVE-2020-11023 — jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2021-22096 — springframework: malicious input leads to insertion of additional log entries CVE-2021-23358 — nodejs-underscore: Arbitrary code execution via the template function CVE-2022-2806 — ovirt-log-collector: RHVM admin password is logged unfiltered CVE-2022-31129 — moment: inefficient parsing algorithm resulting in DoS

🔗 References (25)