CVE-2014-7814

MEDIO 6.5CVE-2014-7814 · Published 16/01/2015 · updated 17/06/2026

En resumen

CVE-2014-7814 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a cloudforms 3.1 management engine (redhat).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 72.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
cloudforms 3.1 management engine redhat	`= 5.3`	No fix yet

Description

SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter.

References

rhn.redhat.com/errata/RHSA-2015-0028.html · Vendor Advisory
secunia.com/advisories/62255

Más vulnerabilidades de cloudforms 3.1 management engine

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free