Total vulnerabilities in the database
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.
| Software | From | Fixed in |
|---|---|---|
| redhat / spacewalk-java | 2.0.2 | 2.0.2.x |
| redhat / spacewalk-java | 1.2.39 | 1.2.39.x |
| redhat / spacewalk-java | 1.7.54 | 1.7.54.x |
| redhat / satellite | 5.6 | 5.6.x |
| redhat / satellite | 5.5 | 5.5.x |
| redhat / satellite | 5.4 | 5.4.x |
| redhat / satellite_with_embedded_oracle | 5.4 | 5.4.x |
| redhat / satellite_with_embedded_oracle | 5.5 | 5.5.x |
| suse / manager | 1.7 | 1.7.x |