Spacewalk Java
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:spacewalk-java:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Spacewalk Java (4edf7305-3aa5-598a-ba10-717efaccf3e7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/apt-spacewalk |
purl2cpe | 2026-06-01 10:12:54.141822 |
pkg:github/spacewalkproject/spacewalk |
purl2cpe | 2026-06-01 10:12:54.141824 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-4415 |
vulnerable | 2026-06-08 05:04:36.072236 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria variable in a software channels search; (2) end_year, (3) start_hour, (4) end_am_pm, (5) end_day, (6) end_hour, (7) end_minute, (8) end_month, (9) end_year, (10) optionScanDateSearch, (11) result_filter, (12) search_string, (13) show_as, (14) start_am_pm, (15) start_day, (16) start_hour, (17) start_minute, (18) start_month, (19) start_year, or (20) whereToSearch variable in an scap audit results search; (21) end_minute, (22) end_month, (23) end_year, (24) errata_type_bug, (25) errata_type_enhancement, (26) errata_type_security, (27) fineGrained, (28) list_1892635924_sortdir, (29) optionIssueDateSearch, (30) start_am_pm, (31) start_day, (32) start_hour, (33) start_minute, (34) start_month, (35) start_year, or (36) view_mode variable in an errata search; or (37) fineGrained variable in a systems search, related to PAGE_SIZE_LABEL_SELECTED.
Published: 2014-02-14T15:00:00.000Z
Updated: 2024-08-06T16:45:13.526Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1869 |
vulnerable | 2026-06-08 05:03:57.004554 |
Details available
CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via the return_url parameter.
Published: 2014-04-01T01:00:00.000Z
Updated: 2024-08-06T15:20:36.977Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2236 |
vulnerable | 2026-06-08 04:54:12.398088 |
Details available
The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks.
Published: 2014-04-15T18:00:00.000Z
Updated: 2024-08-07T02:25:07.611Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.