Red Hat Satellite

6 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2025-10990corrigé en 6.17.5, 6.16.5.4Rexml: rexml: denial of service via inefficient regex parsingHIGH 7.50.5 %
CVE-2020-14380Red Hat Satellite 6.8An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant externHIGH 7.50.8 %
CVE-2020-14371Red Hat Satellite 6.6.3 Red Hat Satellite 6.7A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are runMEDIUM 6.50.9 %
CVE-2020-14335Red Hat Satellite 6.9A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flMEDIUM 5.50.2 %
CVE-2021-20256As shipped in Red Hat Satellite 6A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hMEDIUM 5.30.3 %
CVE-2020-143346A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker toHIGH 8.80.3 %