CVE-2014-3595
Fixed in a distro release EPSS 2%
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.
Products: redhat satellite, redhat satellite_with_embedded_oracle, redhat spacewalk-java, suse manager, suse manager_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat network satellite 5.4 | spacewalk-java | 0:1.2.39-137.el5sat |
| Red Hat network satellite 5.4 | spacewalk-java | 0:1.2.39-137.el6sat |
| Red Hat network satellite 5.4 | spacewalk-java-config | 0:1.2.39-137.el6sat |
| Red Hat network satellite 5.4 | spacewalk-java-config | 0:1.2.39-137.el5sat |
| Red Hat network satellite 5.4 | spacewalk-java-lib | 0:1.2.39-137.el6sat |
| Red Hat network satellite 5.4 | spacewalk-java-lib | 0:1.2.39-137.el5sat |
| Red Hat network satellite 5.4 | spacewalk-java-oracle | 0:1.2.39-137.el6sat |
| Red Hat network satellite 5.4 | spacewalk-java-oracle | 0:1.2.39-137.el5sat |
| Red Hat network satellite 5.4 | spacewalk-taskomatic | 0:1.2.39-137.el5sat |
| Red Hat network satellite 5.4 | spacewalk-taskomatic | 0:1.2.39-137.el6sat |
| Red Hat network satellite 5.5 | spacewalk-java | 0:1.7.54-129.el6sat |
| Red Hat network satellite 5.5 | spacewalk-java | 0:1.7.54-129.el5sat |
| Red Hat network satellite 5.5 | spacewalk-java-config | 0:1.7.54-129.el5sat |
| Red Hat network satellite 5.5 | spacewalk-java-config | 0:1.7.54-129.el6sat |
| Red Hat network satellite 5.5 | spacewalk-java-lib | 0:1.7.54-129.el5sat |
| Red Hat network satellite 5.5 | spacewalk-java-lib | 0:1.7.54-129.el6sat |
| Red Hat network satellite 5.5 | spacewalk-java-oracle | 0:1.7.54-129.el5sat |
| Red Hat network satellite 5.5 | spacewalk-java-oracle | 0:1.7.54-129.el6sat |
| Red Hat network satellite 5.5 | spacewalk-taskomatic | 0:1.7.54-129.el5sat |
| Red Hat network satellite 5.5 | spacewalk-taskomatic | 0:1.7.54-129.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java | 0:2.0.2-85.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java | 0:2.0.2-85.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java-config | 0:2.0.2-85.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java-config | 0:2.0.2-85.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-lib | 0:2.0.2-85.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-lib | 0:2.0.2-85.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java-oracle | 0:2.0.2-85.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java-oracle | 0:2.0.2-85.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-postgresql | 0:2.0.2-85.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-postgresql | 0:2.0.2-85.el5sat |
| Red Hat network satellite 5.6 | spacewalk-taskomatic | 0:2.0.2-85.el6sat |
| Red Hat network satellite 5.6 | spacewalk-taskomatic | 0:2.0.2-85.el5sat |