Approved changes feed: RSS · Atom

cpe:2.3:a:red_hat:red_hat_satellite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRed Hat (a3686528-5679-55c9-b393-abe45df26bd2)
ProductRed Hat Satellite (c40ca1ff-3cb3-57b7-a516-ad84c2a99c7a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7514 vulnerable 2026-06-08 05:09:56.365371 Details available
MEDIUM (4.3)
A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.
Published: 2018-07-30T13:00:00.000Z
Updated: 2024-08-05T16:04:11.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7513 vulnerable 2026-06-08 05:09:56.359515 Details available
MEDIUM (5.4)
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.
Published: 2018-08-22T15:00:00.000Z
Updated: 2024-08-05T16:04:11.809Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.