CVE-2014-7814

Опубликовано: 16 янв. 2015

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter.

Ссылки

http://rhn.redhat.com/errata/RHSA-2015-0028.html
Vendor Advisory
http://secunia.com/advisories/62255
http://rhn.redhat.com/errata/RHSA-2015-0028.html
Vendor Advisory
http://secunia.com/advisories/62255

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:cloudforms_3.1_management_engine:5.3:*:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00311

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVE-2014-7814

redhat

около 11 лет назад

SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter.

GHSA-ww52-g4g7-mhj7

github

больше 3 лет назад

SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter.

EPSS

Процентиль: 54%

0.00311

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-89