Red Hat Network Satellite
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:network_satellite:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Network Satellite (288f7912-748b-5f23-9f91-08239223ee0c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-2143 |
vulnerable | 2026-06-08 05:03:58.622049 |
Details available
The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by setting a user account to an administrator account.
Published: 2014-04-17T14:00:00.000Z
Updated: 2024-08-06T15:27:40.812Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3344 |
vulnerable | 2026-06-08 04:59:24.793750 |
Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form
MEDIUM (5.4)
A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's browser session.
Published: 2014-02-05T18:00:00.000Z
Updated: 2026-04-02T23:42:25.911Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2927 |
vulnerable | 2026-06-08 04:58:09.658645 |
Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms
MEDIUM (5.4)
A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HTML into web pages viewed by other users. The flaw is triggered through vectors related to Search forms, enabling attackers to potentially steal sensitive information or perform actions on behalf of the victim.
Published: 2014-02-05T18:00:00.000Z
Updated: 2026-04-02T23:42:25.576Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2920 |
vulnerable | 2026-06-08 04:58:09.652229 |
Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.
MEDIUM (5.5)
A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.
Published: 2014-02-05T18:00:00.000Z
Updated: 2026-04-02T21:23:38.316Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2919 |
vulnerable | 2026-06-08 04:58:09.651888 |
Details available
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
Published: 2014-02-05T18:00:00.000Z
Updated: 2024-08-06T23:15:31.782Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1594 |
vulnerable | 2026-06-08 04:58:00.874185 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.