Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network RHN Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the 1 subject or 2 content values of a note in a system.addNote XML-RPC call...

CVE-2012-6149: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network RHN Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the 1 subject or 2 content values of a note in a system.addNote XML-RPC call...

PT-2014-2378

Name of the Vulnerable Software and Affected Versions Red Hat Network Satellite versions 5.6 Description The issue allows remote attackers to inject arbitrary web script or HTML via the subject or content values of a note in a system.addNote XML-RPC call, potentially leading to cross-site scripti...