Red Hat Satellite
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-10990 | fixed in 6.17.5, 6.16.5.4 | Rexml: rexml: denial of service via inefficient regex parsing | HIGH 7.5 | 0.5 % | ||
| CVE-2020-14380 | Red Hat Satellite 6.8 | An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant extern | HIGH 7.5 | 0.8 % | ||
| CVE-2020-14371 | Red Hat Satellite 6.6.3 Red Hat Satellite 6.7 | A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are run | MEDIUM 6.5 | 0.9 % | ||
| CVE-2020-14335 | Red Hat Satellite 6.9 | A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This fl | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-20256 | As shipped in Red Hat Satellite 6 | A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_h | MEDIUM 5.3 | 0.3 % | ||
| CVE-2020-14334 | 6 | A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to | HIGH 8.8 | 0.3 % |