CVE-2013-4181: Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet in oVirt E...

Security readout for executives and security teams

CVE-2013-4181 is a cross-site scripting issue in oVirt Engine and Red Hat Enterprise Virtualization Manager. An attacker could inject web script or HTML into the RedirectServlet alert handling path. Business risk is mainly compromise of administrator browser sessions or misleading management-console content, but the provided sources do not show active exploitation. Exposure is most likely in legacy oVirt Engine or Red Hat Enterprise Virtualization Manager deployments, especially RHEV 3 and 3.2 management consoles reachable by untrusted users or networks. Prioritize if the organization still runs legacy Red Hat virtualization management. The issue is old and not KEV-listed, but management-console XSS can still matter where privileged administrators use exposed consoles. Mitigation focus: Check Red Hat advisory RHSA-2013:1210 for vendor-supported updates and package guidance.; Inventory any oVirt Engine or RHEV-M systems, especially RHEV 3 and 3.2.; Restrict management-console access to trusted administrative networks and authenticated administrators..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.