Red Hat Red Hat Network Satellite Server v 5.4
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2012-0059 | fixed in 0:1.2.13-66.el5sat | Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages | MEDIUM 4.9 | 1.7 % | ||
| CVE-2011-3344 | fixed in 0:1.2.2-7.el5sat | Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form | MEDIUM 5.4 | 1.5 % | ||
| CVE-2011-2927 | fixed in 0:1.2.2-7.el5sat | Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms | MEDIUM 5.4 | 1.5 % | ||
| CVE-2011-2920 | fixed in 0:1.2.2-7.el5sat | Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution. | MEDIUM 5.5 | 2.0 % | ||
| CVE-2011-1594 | fixed in 0:1.2.2-7.el5sat | Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter | MEDIUM 6.5 | 1.5 % | ||
| CVE-2013-2056 | fixed in 0:1.2.13-79.el5sat | Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass | HIGH 7.5 | 2.6 % | ||
| CVE-2011-4346 | fixed in 0:1.2.7-21.el5sat | Satellite: xss in custom system information key handling | MEDIUM 4.6 | 1.2 % | ||
| CVE-2009-4139 | fixed in 0:1.2.39-85.el5sat | Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery | MEDIUM 6.8 | 0.9 % |