XSS in Redhat Satellite
CVE-2014-3595
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.018 (75.5th percentile) — read the EPSS interpretation.
Affected products
- Redhat Satellite — versions 5.4, 5.5, 5.6
- Redhat Satellite_with_embedded_oracle — versions 5.4, 5.5
- Redhat Spacewalk-java — versions 1.2.39, 1.7.54, 2.0.2
- Suse Manager — versions 1.7
- Suse Manager_server
- Suse Suse_linux_enterprise_server — versions 11
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (vendor-advisory, Patch, Mailing List, x_refsource_SUSE, Vendor Advisory)
- secalert@redhat.com (vendor-advisory, Patch, Mailing List, x_refsource_SUSE, Vendor Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)