Cross-site Scripting (XSS)

2019-01-1508:56:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

46.9%

JSON

spacewalk is vulnerable to cross-site scripting (XSS). A remote authenticated user is able to inject arbitrary Javascript into another user’s by creating a malicious note containing Javascript code, which will execute when viewed and loaded on the victim’s browser.

CPENameOperatorVersion
satellite-brandingeq5.5.0.4__1.el6sat
satellite-brandingeq5.4.0.11__1.el5sat
satellite-brandingeq5.4.0.8__1.el5sat
satellite-brandingeq5.5.0.4__1.el5sat
satellite-brandingeq5.5.0.7__1.el6sat
satellite-brandingeq5.6.0.22__1.el5sat
satellite-brandingeq5.5.0.5__1.el5sat
satellite-brandingeq5.5.0.5__1.el6sat
satellite-brandingeq5.5.0.3__1.el6sat
satellite-brandingeq5.5.0.3__1.el5sat

Name	Operator	Version
satellite-branding	eq	5.5.0.4__1.el6sat
satellite-branding	eq	5.4.0.11__1.el5sat
satellite-branding	eq	5.4.0.8__1.el5sat
satellite-branding	eq	5.5.0.4__1.el5sat
satellite-branding	eq	5.5.0.7__1.el6sat
satellite-branding	eq	5.6.0.22__1.el5sat
satellite-branding	eq	5.5.0.5__1.el5sat
satellite-branding	eq	5.5.0.5__1.el6sat
satellite-branding	eq	5.5.0.3__1.el6sat
satellite-branding	eq	5.5.0.3__1.el5sat