CVE-2016-3079

CVE-2016-3079 covers multiple XSS vulnerabilities in the Web UI of Spacewalk and Red Hat Satellite 5.7, exploitable via several vectors in SystemEntitlements.do, EntitlementDetails.do, and System Set Manager components. The connected records indicate mitigations/patches exist: Red Hat issued RHSA...

CVE-2009-4139

The CVE-2009-4139 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in Spacewalk’s spacewalk-java (version 1.2.39) used by Red Hat Network Satellite server (5.3.0–5.4.1) and related products. The issue allows an attacker, by deceiving an authenticated user, to hijack that user’s s...

CVE-2010-2236

The CVE-2010-2236 issue concerns the monitoring probe display in spacewalk-java (before 2.1.148-1) and RHN Satellite (4.0.0–4.2.0, 5.1.0–5.3.0) and Proxy 5.3.0. It allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors,...