Lucene search

K
nvd[email protected]NVD:CVE-2014-3654
HistoryNov 03, 2014 - 4:55 p.m.

CVE-2014-3654

2014-11-0316:55:03
CWE-79
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do.

Affected configurations

NVD
Node
redhatsatelliteMatch5.5
OR
redhatsatelliteMatch5.6
OR
redhatsatellite_with_embedded_oracleMatch5.5
OR
redhatspacewalk-javaMatch2.0.2
Node
susemanager_serverMatch-
Node
susemanagerMatch1.7
AND
susesuse_linux_enterprise_serverMatch11sp2

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%