Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:spacewalk-java:1.7.54:*:*:*:*:*:*:*

part: a version: 1.7.54 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductSpacewalk Java (4edf7305-3aa5-598a-ba10-717efaccf3e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/apt-spacewalk purl2cpe 2026-06-01 10:12:54.141828
pkg:github/spacewalkproject/spacewalk purl2cpe 2026-06-01 10:12:54.141830

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3595 vulnerable 2026-06-08 05:05:33.658991 Details available
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.
Published: 2014-09-22T15:00:00.000Z
Updated: 2024-08-06T10:50:17.708Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.