Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:spacewalk-java:2.0.2:*:*:*:*:*:*:*

part: a version: 2.0.2 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductSpacewalk Java (4edf7305-3aa5-598a-ba10-717efaccf3e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/apt-spacewalk purl2cpe 2026-06-01 10:12:54.141831
pkg:github/spacewalkproject/spacewalk purl2cpe 2026-06-01 10:12:54.141832

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3654 vulnerable 2026-06-08 05:05:42.184539 Details available
Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do.
Published: 2014-11-03T16:00:00.000Z
Updated: 2024-08-06T10:50:17.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3595 vulnerable 2026-06-08 05:05:33.659512 Details available
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.
Published: 2014-09-22T15:00:00.000Z
Updated: 2024-08-06T10:50:17.708Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.