Total vulnerabilities in the database
Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.
| Software | From | Fixed in |
|---|---|---|
| redhat / satellite | 5.6 | 5.6.x |
| redhat / satellite_5_managed_db | 5.6 | 5.6.x |
| redhat / spacewalk-java | 2.0.2-57 | 2.0.2-57.x |