SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 54.2%.
Red Hat
SQLi
Cloudforms Management Engine
Manageiq Enterprise Virtualization Manager
NVD
CVSS 2.0
7.5
EPSS
54.2%
Threat
4.6
Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Denial Of Service
Juniper
Junos
Srx100
Srx110
+10
NVD
CVSS 2.0
7.8
EPSS
0.5%