Vulnerabilities (CVE)

Filtered by vendor Redhat Subscribe
Filtered by product Spacewalk
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-7812 2 Redhat, Suse 3 Satellite, Spacewalk, Manager 2022-02-03 3.5 LOW N/A
Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field.
CVE-2014-7811 2 Redhat, Suse 3 Network Satellite, Spacewalk, Manager 2016-04-04 3.5 LOW N/A
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.
CVE-2011-1594 1 Redhat 2 Network Satellite, Spacewalk 2014-02-25 5.8 MEDIUM N/A
Open redirect vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url_bounce parameter.
CVE-2011-2927 1 Redhat 2 Network Satellite, Spacewalk 2014-02-25 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allow remote attackers to inject arbitrary web script or HTML via vectors related to Search forms.
CVE-2011-3344 1 Redhat 2 Network Satellite, Spacewalk 2014-02-25 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Lookup Login/Password form in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the URI.
CVE-2011-2920 1 Redhat 2 Network Satellite, Spacewalk 2014-02-25 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allow remote attackers to inject arbitrary web script or HTML via the "Filter by Synopsis" field and other unspecified filter forms.
CVE-2011-2919 1 Redhat 2 Network Satellite, Spacewalk 2014-02-25 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.