Redhat Edeploy — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Edeploy, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2014-3699 — CVSS 9.8 (critical): eDeploy has RCE via cPickle deserialization of untrusted data
• CVE-2014-3700 — CVSS 9.8 (critical): eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data
• CVE-2014-8174 — CVSS 9.8 (critical): eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.
• CVE-2014-3702 — CVSS 9.1 (critical): Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently…
• CVE-2014-3701 — CVSS 8.1 (high): eDeploy has tmp file race condition flaws