Security Advisory

CVE-2014-7814

6.5

Vulnerability Description

SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter.
Published Date January 16, 2015
Official Source NIST NVD Advisory