GCVE - cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*

part: a version: 5.5 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Satellite (`0887e319-aaeb-5982-9c2f-3d67b0c1b34e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7513`	vulnerable	2026-06-08 05:09:56.364001	Details available MEDIUM (5.4) It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate. Published: 2018-08-22T15:00:00.000Z Updated: 2024-08-05T16:04:11.809Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7513	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3654`	vulnerable	2026-06-08 05:05:42.182755	Details available Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do. Published: 2014-11-03T16:00:00.000Z Updated: 2024-08-06T10:50:17.951Z Open on db.gcve.eu Reference links http://secunia.com/advisories/60976 http://secunia.com/advisories/62027 http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00010.html http://rhn.redhat.com/errata/RHSA-2014-1762.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3595`	vulnerable	2026-06-08 05:05:33.647805	Details available Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging. Published: 2014-09-22T15:00:00.000Z Updated: 2024-08-06T10:50:17.708Z Open on db.gcve.eu Reference links http://secunia.com/advisories/62027 http://rhn.redhat.com/errata/RHSA-2014-1184.html http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00031.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00009.html http://secunia.com/advisories/61115	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2056`	vulnerable	2026-06-08 05:03:58.161853	Details available The Inter-Satellite Sync (ISS) operation in Red Hat Network (RHN) Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skipping the initial authentication call. Published: 2013-07-31T10:00:00.000Z Updated: 2024-08-06T15:20:37.488Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2013-0848.html http://www.osvdb.org/93566 http://secunia.com/advisories/53487	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.