CVE-2014-7811: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Spacewalk and Red Hat Network RHN Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API...

CVE-2014-7812: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Spacewalk and Red Hat Network RHN Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field...

CVE-2014-3654: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network RHN Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to 1 kickstart/cobbler/CustomSnippetList.do, 2...

CVE-2010-2236

The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network RHN Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors,...

PT-2014-2079

Name of the Vulnerable Software and Affected Versions spacewalk-java versions prior to 2.1.148-1 Red Hat Network RHN Satellite versions 4.0.0 through 4.2.0 Red Hat Network RHN Satellite versions 5.1.0 through 5.3.0 Proxy version 5.3.0 Description The issue allows remote authenticated users with...

CVE-2010-2236: Improper Input Validation

The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network RHN Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors,...

PT-2014-2785

Name of the Vulnerable Software and Affected Versions Red Hat Network RHN Satellite versions 5.6 Spacewalk versions 5.6 Description The issue allows remote attackers to inject arbitrary web script or HTML via various variables in different searches, including software channels search, scap audit...

CVE-2013-1871: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in account/EditAddress.do in Spacewalk and Red Hat Network RHN Satellite 5.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Spacewalk 1.6, as used in Red Hat Network RHN Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page...

PT-2014-2202

Name of the Vulnerable Software and Affected Versions Red Hat Network RHN Satellite and Proxy version 5.4 Description The issue allows remote administrators to obtain user passwords by reading the server log and an email when a system registration XML-RPC call fails. This occurs because cleartext...

CVE-2011-2919: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Spacewalk 1.6, as used in Red Hat Network RHN Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page...

CVE-2013-2056: Improper Authentication

The Inter-Satellite Sync ISS operation in Red Hat Network RHN Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skipping the initial authentication call...

CVE-2011-4346: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web interface in Red Hat Network RHN Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page...

PT-2011-1298

Name of the Vulnerable Software and Affected Versions Red Hat Network RHN Satellite Server versions 5.3 through 5.4 Description The issue allows remote attackers to obtain sensitive host information or use the server as a proxy to connect to arbitrary services and IP addresses. Recommendations Fo...

CVE-2009-0788: Exposure of Sensitive Information to an Unauthorized Actor

Red Hat Network RHN Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to 1 obtain unspecified sensitive host information or 2 use the server as an inadvertent proxy to connect to arbitrary services and IP addresses via unspecified vectors...

CVE-2011-0718

Red Hat Network RHN Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks...

CVE-2011-0717: Undefined Security Weakness

Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...

CVE-2011-0718: Improper Authentication

Red Hat Network RHN Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks...