Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-3079
HistoryApr 14, 2016 - 2:59 p.m.

Cross site scripting

2016-04-1414:59:00
PRIOn knowledge base
www.prio-n.com
6

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to systems/SystemEntitlements.do; (2) the label parameter to admin/multiorg/EntitlementDetails.do; or the name of a (3) snapshot tag or (4) system group in System Set Manager (SSM).

CPENameOperatorVersion
satelliteeq5.7

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

Related for PRION:CVE-2016-3079