Multiple Cross-site Scripting (XSS)

2019-05-0205:28:22

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

68.8%

JSON

Spacewalk Web-UI and Red Hat Satellite 5.7 is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists because it does not properly sanitize parameters in systems/SystemEntitlements.do; and admin/multiorg/EntitlementDetails.do, allowing the attacker to inject arbitrary script.

CPENameOperatorVersion
spacewalk-javaeq1.7.54__119.el6sat
spacewalk-javaeq1.7.54__126.el6sat
spacewalk-javaeq2.0.2__87.el6sat
spacewalk-javaeq1.7.54__115.el6sat
spacewalk-javaeq2.0.2__89.el6sat
spacewalk-javaeq1.2.39__100.el6sat
spacewalk-javaeq1.2.39__88.el6sat
spacewalk-javaeq2.3.8__108.el6sat
spacewalk-javaeq1.2.39__91.el6sat
spacewalk-javaeq1.2.39__137.el6sat

Name	Operator	Version
spacewalk-java	eq	1.7.54__119.el6sat
spacewalk-java	eq	1.7.54__126.el6sat
spacewalk-java	eq	2.0.2__87.el6sat
spacewalk-java	eq	1.7.54__115.el6sat
spacewalk-java	eq	2.0.2__89.el6sat
spacewalk-java	eq	1.2.39__100.el6sat
spacewalk-java	eq	1.2.39__88.el6sat
spacewalk-java	eq	2.3.8__108.el6sat
spacewalk-java	eq	1.2.39__91.el6sat
spacewalk-java	eq	1.2.39__137.el6sat