Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:spacewalk:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductSpacewalk (0e87b145-3aa4-55cf-9497-b3d9b0dc6643)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7470 vulnerable 2026-06-08 05:09:56.005289 Details available
MEDIUM (6.5)
It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.
Published: 2018-07-27T13:00:00.000Z
Updated: 2024-08-05T16:04:11.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7812 vulnerable 2026-06-08 05:05:59.918081 Details available
Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field.
Published: 2015-01-15T15:00:00.000Z
Updated: 2024-08-06T13:03:26.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7811 vulnerable 2026-06-08 05:05:59.916245 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.
Published: 2015-01-15T15:00:00.000Z
Updated: 2024-08-06T13:03:27.315Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.