CVE-2013-2050

🗓️ 11 Jan 2014 01:00:00Reported by redhatType

cve

cve🔗 web.nvd.nist.gov👁 56 Views🌐 WEB

SQL injection vulnerability in Red Hat CloudForms 2.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2013-2050	29 May 201815:50	–	circl
Check Point Advisories	Red Hat CloudForms Management Engine SQL Injection (CVE-2013-2050)	14 May 201400:00	–	checkpoint_advisories
Cvelist	CVE-2013-2050	11 Jan 201401:00	–	cvelist
Metasploit	Red Hat CloudForms Management Engine 5.1 miq_policy/explorer SQL Injection	9 Dec 201318:49	–	metasploit
NVD	CVE-2013-2050	11 Jan 201401:55	–	nvd
OSV	RHEA-2013:1487 Red Hat Enhancement Advisory: Red Hat CloudForms 3.0 product update	15 Sep 202420:53	–	osv
Packet Storm	Red Hat CloudForms Management Engine 5.1 miq_policy/explorer SQL Injection	27 Dec 201300:00	–	packetstorm
Prion	Sql injection	11 Jan 201401:55	–	prion
Positive Technologies	PT-2014-2542 · Red Hat +1 · Red Hat Cloudforms +1	11 Jan 201400:00	–	ptsecurity
RedHat Linux	Important: Red Hat Enhancement Advisory: Red Hat CloudForms 3.0 product update	31 Oct 201314:18	–	redhat

NVD

Node

redhat cloudforms_management_engineMatch5.1

OR

redhat manageiq_enterprise_virtualization_managerRange≤5.0

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/89984
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
packetstormsecurity	www.packetstormsecurity.com/files/124609/cfme_manageiq_evm_pass_reset.rb.txt
securityfocus	www.securityfocus.com/bid/64524
secunia	www.secunia.com/advisories/56181

Parameter	Position	Path	Description	CWE
profile[]	query param	miq_policy/explorer	SQL injection via profile[] in explorer action (newer schema)	CWE-89
profile[]	request body	miq_policy/explorer	SQL injection via profile[] in explorer action (older schema)	CWE-89

29 Apr 2026 01:13Current

8.2High risk

Vulners AI Score8.2

CVSS 27.5

EPSS0.54161

cve-2013-2050 sql injection red hat cloudforms nvd security vulnerability manageiq