CVE-2020-14316

CRITICAL Year: 2020
CVSS v3 Score
9.9
Critical
CVSS v2 Score
6.5
Medium
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances (VMIs) can be used to gain access to the host's filesystem. Successful exploitation allows an attacker to assume the privileges of the VM process on the host system. In worst-case scenarios an attacker can read and modify any file on the system where the VMI is running. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Related Vulnerabilities

CVE-2017-10202

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker...

NVD-CWE-Other2017

CVE-2017-10272

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerabil...

NVD-CWE-Other2017

CVE-2017-10352

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12....

NVD-CWE-Other2017

CVE-2017-10396

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: AffairWhere). Supported versions that are affected are 2.2.5.0, 2.2.6.0 and 2.2.7...

NVD-CWE-Other2017

CVE-2017-10404

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery). Supported versions that are affected are 8.5.1 and 9.0.0. Easily ex...

NVD-CWE-Other2017

CVE-2017-3503

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access (Apache Commons BeanUtils)). Supported versions that ar...

NVD-CWE-Other2017