Manageiq Enterprise Virtualization Manager

DATE	CVE	VULNERABILITY TITLE	RISK
2019-11-01	CVE-2013-0186	Cross-site Scripting vulnerability in Redhat products Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. network low complexity redhat CWE-79	6.1
2018-05-01	CVE-2013-0185	Cross-Site Request Forgery (CSRF) vulnerability in Redhat Manageiq Enterprise Virtualization Manager Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors. network low complexity redhat CWE-352	8.8