CVEvulnerability
CVE-2014-7811
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-01-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.
Affected configurations
• redhat network satellite (<= 5.6)
• redhat spacewalk
• suse manager 1.7
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-0033.html Vendor Advisory
- http://secunia.com/advisories/62183 secunia.com
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-0033.html Vendor Advisory
- http://secunia.com/advisories/62183 secunia.com