Red Hat Manageiq Enterprise Virtualization Manager vulnerabilities

3 CVEs affecting Red Hat Manageiq Enterprise Virtualization Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-0186, published 2019-11-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-2050, published 2014-01-11. High severity, CVSS 7.5. EPSS: 15.7% chance of exploitation in the next 30 days. SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote…
CVE-2013-0186, published 2019-11-01. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-0185, published 2018-05-01. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified…