Cumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted Ajax update request.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-4182
http://www.securitytracker.com/id/1029122