redhat edeploy vulnerabilities

Latest redhat edeploy CVEs

Newest publication first

1. CVE-2014-3701 eDeploy has tmp file race condition flaws

   Published 2019-12-15

   High·CVSS 8.1 EPSS 1.5%

   eDeploy has tmp file race condition flaws

2. CVE-2014-3699 eDeploy has RCE via cPickle deserialization of untrusted data

   Published 2019-12-15

   Critical·CVSS 9.8 EPSS 2.4%

   eDeploy has RCE via cPickle deserialization of untrusted data

3. CVE-2014-3700 eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data

   Published 2019-11-21

   Critical·CVSS 9.8 EPSS 2.8%

   eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data

4. CVE-2014-3702 Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot....

   Published 2017-10-16

   Critical·CVSS 9.1 EPSS 1.9%

   Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.

5. CVE-2014-8174 eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.

   Published 2017-09-19

   Critical·CVSS 9.8 EPSS 3.0%

   eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.