Redhat Edeploy vulnerabilities

3 known vulnerabilities affecting redhat/edeploy.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL3

Vulnerabilities

Page 1 of 1

CVE-2014-3700CRITICALCVSS 9.8≤ 1.6.02019-11-21

CVE-2014-3700 [CRITICAL] CWE-74 CVE-2014-3700: eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data

CVE-2014-3702CRITICALCVSS 9.1v0.1.0v0.2.0+6 more2017-10-16

CVE-2014-3702 [CRITICAL] CWE-22 CVE-2014-3702: Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary di Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.

CVE-2014-8174CRITICALCVSS 9.8≤ 1.11.02017-09-19

CVE-2014-8174 [CRITICAL] CWE-200 CVE-2014-8174: eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.