Manageiq Enterprise Virtualization Manager CVEs and Security Vulnerabilities

CVE-2013-2050

2: miq_policy/explorer SQL injection

SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.

CVSS 2.0 · 7.5 High EPSS 15.7% KEV · Not listed

Vendors

Redhat

Products

Cloudforms Management Engine Cloudforms Managementengine Manageiq Enterprise Virtualization Manager

CVE-2013-0186

EVM: Stored XSS

Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Cloudforms Cloudforms Managementengine Manageiq Enterprise Virtualization Manager

CVE-2013-0185

EVM: CSRF

Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Cloudforms Managementengine Manageiq Enterprise Virtualization Manager

Search vulnerabilities

2: miq_policy/explorer SQL injection

EVM: Stored XSS

EVM: CSRF