Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:spacewalk:1.6:*:*:*:*:*:*:*

part: a version: 1.6 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductSpacewalk (0e87b145-3aa4-55cf-9497-b3d9b0dc6643)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-3344 vulnerable 2026-06-08 04:59:24.794717 Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form
MEDIUM (5.4)
A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's browser session.
Published: 2014-02-05T18:00:00.000Z
Updated: 2026-04-02T23:42:25.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2927 vulnerable 2026-06-08 04:58:09.658676 Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms
MEDIUM (5.4)
A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HTML into web pages viewed by other users. The flaw is triggered through vectors related to Search forms, enabling attackers to potentially steal sensitive information or perform actions on behalf of the victim.
Published: 2014-02-05T18:00:00.000Z
Updated: 2026-04-02T23:42:25.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2920 vulnerable 2026-06-08 04:58:09.652259 Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.
MEDIUM (5.5)
A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.
Published: 2014-02-05T18:00:00.000Z
Updated: 2026-04-02T21:23:38.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2919 vulnerable 2026-06-08 04:58:09.651912 Details available
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
Published: 2014-02-05T18:00:00.000Z
Updated: 2024-08-06T23:15:31.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1594 vulnerable 2026-06-08 04:58:00.875924 Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter
MEDIUM (6.5)
A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to unauthorized information disclosure or credential theft.
Published: 2014-02-05T18:00:00.000Z
Updated: 2026-04-02T21:17:14.782Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.