296,733
Total vulnerabilities in the database
Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.
| Software | From | Fixed in |
|---|---|---|
| redhat / subscription_asset_manager | 1.1.0 | 1.1.0.x |
| redhat / subscription_asset_manager | 1.0.0 | 1.0.0.x |
| redhat / subscription_asset_manager | - | 1.2.0.x |