Cross-site Scripting (XSS)

2019-01-1509:04:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

39.8%

JSON

spacewalk-java is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists through multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.

CPENameOperatorVersion
satellite-schemaeq5.5.0.20__1.el6sat
satellite-schemaeq5.6.0.12__1.el6sat
satellite-schemaeq5.4.0.13__1.el6sat
satellite-schemaeq5.6.0.19__3.el6sat
satellite-schemaeq5.4.0.19__1.el6sat
satellite-schemaeq5.4.0.28__1.el6sat
satellite-schemaeq5.5.0.13__1.el6sat
satellite-schemaeq5.6.0.10__1.el6sat
satellite-schemaeq5.4.0.17__1.el6sat
satellite-schemaeq5.6.0.17__1.el6sat

Name	Operator	Version
satellite-schema	eq	5.5.0.20__1.el6sat
satellite-schema	eq	5.6.0.12__1.el6sat
satellite-schema	eq	5.4.0.13__1.el6sat
satellite-schema	eq	5.6.0.19__3.el6sat
satellite-schema	eq	5.4.0.19__1.el6sat
satellite-schema	eq	5.4.0.28__1.el6sat
satellite-schema	eq	5.5.0.13__1.el6sat
satellite-schema	eq	5.6.0.10__1.el6sat
satellite-schema	eq	5.4.0.17__1.el6sat
satellite-schema	eq	5.6.0.17__1.el6sat