Cross-Site Scripting (XSS)

2019-05-0205:28:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

47.4%

JSON

Red Hat Satellite 5 is vulnerable to cross-site scripting (XSS) attacks. The list_1680466951_oldfilterval parameter is not properly sanitized, allowing a remote attacker to pass a malicious input to execute arbitrary Javascript code on the victims browser.

CPENameOperatorVersion
spacewalk-javaeq1.7.54__119.el6sat
spacewalk-javaeq1.7.54__126.el6sat
spacewalk-javaeq2.0.2__87.el6sat
spacewalk-javaeq1.7.54__115.el6sat
spacewalk-javaeq1.2.39__100.el6sat
spacewalk-javaeq2.0.2__89.el6sat
spacewalk-javaeq1.2.39__88.el6sat
spacewalk-javaeq2.3.8__108.el6sat
spacewalk-javaeq1.2.39__91.el6sat
spacewalk-javaeq2.0.2__99.el6sat

Name	Operator	Version
spacewalk-java	eq	1.7.54__119.el6sat
spacewalk-java	eq	1.7.54__126.el6sat
spacewalk-java	eq	2.0.2__87.el6sat
spacewalk-java	eq	1.7.54__115.el6sat
spacewalk-java	eq	1.2.39__100.el6sat
spacewalk-java	eq	2.0.2__89.el6sat
spacewalk-java	eq	1.2.39__88.el6sat
spacewalk-java	eq	2.3.8__108.el6sat
spacewalk-java	eq	1.2.39__91.el6sat
spacewalk-java	eq	2.0.2__99.el6sat