CVE-2014-3654
Fixed in a distro release EPSS 2%
Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do.
Products: redhat satellite, redhat satellite_with_embedded_oracle, redhat spacewalk-java, suse manager_server, suse manager
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat network satellite 5.5 | spacewalk-java | 0:1.7.54-131.el6sat |
| Red Hat network satellite 5.5 | spacewalk-java | 0:1.7.54-131.el5sat |
| Red Hat network satellite 5.5 | spacewalk-java-config | 0:1.7.54-131.el5sat |
| Red Hat network satellite 5.5 | spacewalk-java-config | 0:1.7.54-131.el6sat |
| Red Hat network satellite 5.5 | spacewalk-java-lib | 0:1.7.54-131.el5sat |
| Red Hat network satellite 5.5 | spacewalk-java-lib | 0:1.7.54-131.el6sat |
| Red Hat network satellite 5.5 | spacewalk-java-oracle | 0:1.7.54-131.el5sat |
| Red Hat network satellite 5.5 | spacewalk-java-oracle | 0:1.7.54-131.el6sat |
| Red Hat network satellite 5.5 | spacewalk-taskomatic | 0:1.7.54-131.el5sat |
| Red Hat network satellite 5.5 | spacewalk-taskomatic | 0:1.7.54-131.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java | 0:2.0.2-90.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java | 0:2.0.2-90.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-config | 0:2.0.2-90.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java-config | 0:2.0.2-90.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-lib | 0:2.0.2-90.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java-lib | 0:2.0.2-90.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-oracle | 0:2.0.2-90.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java-oracle | 0:2.0.2-90.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-postgresql | 0:2.0.2-90.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java-postgresql | 0:2.0.2-90.el6sat |
| Red Hat network satellite 5.6 | spacewalk-taskomatic | 0:2.0.2-90.el5sat |
| Red Hat network satellite 5.6 | spacewalk-taskomatic | 0:2.0.2-90.el6sat |