CVEvulnerability
CVE-2014-7812
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-01-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field.
Affected configurations
• redhat satellite 5.6
• redhat spacewalk
• suse manager 1.7
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-0033.html Vendor Advisory
- http://secunia.com/advisories/62183 secunia.com
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-0033.html Vendor Advisory
- http://secunia.com/advisories/62183 secunia.com