CVE-2020-14296

7.1 highEPSS 0.6%

High (7.1) in redhat cloudforms management engine. EPSS 0.6% chance of exploitation in the next 30 days.

Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal network which are not normally accessible.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2020-08-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:cloudforms_management_engine

References

https://access.redhat.com/security/cve/cve-2020-14296
https://bugzilla.redhat.com/show_bug.cgi?id=1847860
https://access.redhat.com/security/cve/cve-2020-14296
https://bugzilla.redhat.com/show_bug.cgi?id=1847860

Check your stack JSON