CVE-2014-7811

Spacewalk: multiple XSS

Published Jan 15, 2015 CVSS 2.0 · 3.5 Low EPSS 1.5% KEV · Not listed
Description
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-7680 Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 1:03 PM
Reserved
Oct 3, 2014, 12:00 AM
Status
Modified
Published
Jan 15, 2015, 3:59 PM
Modified
Jun 17, 2026, 12:15 AM
Severity
Moderate
Public date
Jan 12, 2015, 12:00 AM