CVE-2020-14324

9.1 criticalEPSS 2.5%

Critical (9.1) in redhat cloudforms management engine. EPSS 2.5% chance of exploitation in the next 30 days.

A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker while setuping conversion host through Infrastructure Migration Solution. This flaw allows attacker to execute arbitrary commands on CloudForms server.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2020-08-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:cloudforms_management_engine

References

https://access.redhat.com/security/cve/cve-2020-14324
https://bugzilla.redhat.com/show_bug.cgi?id=1855713
https://access.redhat.com/security/cve/cve-2020-14324
https://bugzilla.redhat.com/show_bug.cgi?id=1855713

Check your stack JSON