{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/114248?format=json","vulnerability_id":"VCID-ymsu-cyvu-6bdh","summary":"CFME: ReportController SQL injection","aliases":[{"alias":"CVE-2014-0137"}],"fixed_packages":[],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/177341?format=json","purl":"pkg:rpm/redhat/cfme@5.2.3.2-1?arch=el6cf","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2bem-j76d-3fez"},{"vulnerability":"VCID-3ww2-a3u7-4qe2"},{"vulnerability":"VCID-6za2-npa4-kybv"},{"vulnerability":"VCID-fmxh-yscm-sbhh"},{"vulnerability":"VCID-g6kr-y1kz-quhs"},{"vulnerability":"VCID-gbnk-dns7-4fhd"},{"vulnerability":"VCID-r7qb-9nt4-m7et"},{"vulnerability":"VCID-tres-k45f-q7aj"},{"vulnerability":"VCID-ymsu-cyvu-6bdh"},{"vulnerability":"VCID-z94j-z575-4ydx"},{"vulnerability":"VCID-zgxv-wbu5-4yg3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme@5.2.3.2-1%3Farch=el6cf"},{"url":"http://public2.vulnerablecode.io/api/packages/177342?format=json","purl":"pkg:rpm/redhat/postgresql92-postgresql@9.2.7-1.1?arch=el6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2bem-j76d-3fez"},{"vulnerability":"VCID-3ww2-a3u7-4qe2"},{"vulnerability":"VCID-6za2-npa4-kybv"},{"vulnerability":"VCID-fmxh-yscm-sbhh"},{"vulnerability":"VCID-g6kr-y1kz-quhs"},{"vulnerability":"VCID-gbnk-dns7-4fhd"},{"vulnerability":"VCID-r7qb-9nt4-m7et"},{"vulnerability":"VCID-tres-k45f-q7aj"},{"vulnerability":"VCID-ymsu-cyvu-6bdh"},{"vulnerability":"VCID-z94j-z575-4ydx"},{"vulnerability":"VCID-zgxv-wbu5-4yg3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/postgresql92-postgresql@9.2.7-1.1%3Farch=el6"},{"url":"http://public2.vulnerablecode.io/api/packages/169156?format=json","purl":"pkg:rpm/redhat/prince@9.0r2-4?arch=el6cf","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2bem-j76d-3fez"},{"vulnerability":"VCID-3djc-6nq8-43er"},{"vulnerability":"VCID-3ww2-a3u7-4qe2"},{"vulnerability":"VCID-66k3-q3b9-5yc5"},{"vulnerability":"VCID-6za2-npa4-kybv"},{"vulnerability":"VCID-am86-p4wh-wkh7"},{"vulnerability":"VCID-ec4f-bg8b-x7ef"},{"vulnerability":"VCID-fmxh-yscm-sbhh"},{"vulnerability":"VCID-g6kr-y1kz-quhs"},{"vulnerability":"VCID-gbnk-dns7-4fhd"},{"vulnerability":"VCID-hdmz-kfek-eyer"},{"vulnerability":"VCID-jx3q-cxcq-9bgq"},{"vulnerability":"VCID-r7qb-9nt4-m7et"},{"vulnerability":"VCID-tres-k45f-q7aj"},{"vulnerability":"VCID-vb9g-cbjt-kybe"},{"vulnerability":"VCID-ymsu-cyvu-6bdh"},{"vulnerability":"VCID-z94j-z575-4ydx"},{"vulnerability":"VCID-zgxv-wbu5-4yg3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/prince@9.0r2-4%3Farch=el6cf"},{"url":"http://public2.vulnerablecode.io/api/packages/177340?format=json","purl":"pkg:rpm/redhat/ruby193-rubygem-actionpack@1:3.2.13-6?arch=el6cf","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2bem-j76d-3fez"},{"vulnerability":"VCID-3ww2-a3u7-4qe2"},{"vulnerability":"VCID-6za2-npa4-kybv"},{"vulnerability":"VCID-fmxh-yscm-sbhh"},{"vulnerability":"VCID-g6kr-y1kz-quhs"},{"vulnerability":"VCID-gbnk-dns7-4fhd"},{"vulnerability":"VCID-r7qb-9nt4-m7et"},{"vulnerability":"VCID-tres-k45f-q7aj"},{"vulnerability":"VCID-ymsu-cyvu-6bdh"},{"vulnerability":"VCID-z94j-z575-4ydx"},{"vulnerability":"VCID-zgxv-wbu5-4yg3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-actionpack@1:3.2.13-6%3Farch=el6cf"}],"references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0137.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0137.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0137","reference_id":"","reference_type":"","scores":[{"value":"0.0039","scoring_system":"epss","scoring_elements":"0.60361","published_at":"2026-06-04T12:55:00Z"},{"value":"0.0039","scoring_system":"epss","scoring_elements":"0.60408","published_at":"2026-06-05T12:55:00Z"},{"value":"0.0039","scoring_system":"epss","scoring_elements":"0.60411","published_at":"2026-06-06T12:55:00Z"},{"value":"0.0039","scoring_system":"epss","scoring_elements":"0.604","published_at":"2026-06-07T12:55:00Z"},{"value":"0.0039","scoring_system":"epss","scoring_elements":"0.60383","published_at":"2026-06-08T12:55:00Z"},{"value":"0.0039","scoring_system":"epss","scoring_elements":"0.60399","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0137"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1076688","reference_id":"1076688","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1076688"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0469","reference_id":"RHSA-2014:0469","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0469"}],"weaknesses":[{"cwe_id":89,"name":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","description":"The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component."}],"exploits":[],"severity_range_score":null,"exploitability":"0.5","weighted_severity":"0.0","risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ymsu-cyvu-6bdh"}