CVE-2015-7544
9.1
CRITICAL · CVSS 3.0 · EPSS 3.4% (pctl 89)
In your normal cycle
Critical by CVSS (9.1), but no sign of active exploitation.
Description
redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows remote authenticated users with the SuperUser role on any Entity to execute arbitrary commands on any host in the RHEV environment.
Scoring
| CVSS | 9.1 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| EPSS | 3.44% — more likely to be exploited than 89% of all CVEs |
| Weakness | CWE-74 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2017-09-25 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| redhat | enterprise virtualization manager |
References
→ the Explorer · watch your stack · NVD