Red Hat Satellite 5.5
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*part: a version: 5.5 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Satellite (0887e319-aaeb-5982-9c2f-3d67b0c1b34e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7513 |
vulnerable | 2026-06-08 05:09:56.364001 |
Details available
MEDIUM (5.4)
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.
Published: 2018-08-22T15:00:00.000Z
Updated: 2024-08-05T16:04:11.809Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3654 |
vulnerable | 2026-06-08 05:05:42.182755 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do.
Published: 2014-11-03T16:00:00.000Z
Updated: 2024-08-06T10:50:17.951Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3595 |
vulnerable | 2026-06-08 05:05:33.647805 |
Details available
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.
Published: 2014-09-22T15:00:00.000Z
Updated: 2024-08-06T10:50:17.708Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2056 |
vulnerable | 2026-06-08 05:03:58.161853 |
Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass
HIGH (7.5)
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
Published: 2013-07-31T10:00:00.000Z
Updated: 2026-11-02T00:59:12.284Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.