CVE-2017-7514
Fixed in a distro release EPSS <1%CVSS 4.3
A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.
Products: Red Hat Satellite
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat network satellite 5.8 | ace-editor | 0:1.1.3-3.el6sat |
| Red Hat network satellite 5.8 | antlr | 0:2.7.7-7.ep5.el6 |
| Red Hat network satellite 5.8 | apache-commons-beanutils | 0:1.8.3-10.redhat_2.ep6.el6 |
| Red Hat network satellite 5.8 | apache-commons-cli | 0:1.2-7.5.redhat_2.ep6.el6.4 |
| Red Hat network satellite 5.8 | bootstrap | 0:3.0.0-4.el6sat |
| Red Hat network satellite 5.8 | bootstrap-datepicker | 0:1.3.0-2.el6sat |
| Red Hat network satellite 5.8 | c3p0 | 0:0.9.1.2-2.ep5.el6 |
| Red Hat network satellite 5.8 | cdn-sync-mappings | 0:2.2-1.el6sat |
| Red Hat network satellite 5.8 | cglib | 0:2.2-5.6.ep5.el6 |
| Red Hat network satellite 5.8 | cobbler | 0:2.0.7-66.el6sat |
| Red Hat network satellite 5.8 | cobbler-loaders | 0:1.0.3-1.el6sat |
| Red Hat network satellite 5.8 | concurrent | 0:1.3.4-10.1.5_jboss_update1.ep5.el6 |
| Red Hat network satellite 5.8 | cx_Oracle | 0:5.1.2-6.el6sat |
| Red Hat network satellite 5.8 | cx_Oracle-debuginfo | 0:5.1.2-6.el6sat |
| Red Hat network satellite 5.8 | dojo | 0:1.6.1-1.el6sat |
| Red Hat network satellite 5.8 | dom4j | 0:1.6.1-11.1.ep5.el6 |
| Red Hat network satellite 5.8 | dwr | 0:3.0rc2-7.el6sat |
| Red Hat network satellite 5.8 | font-awesome | 0:4.0.3-1.el6sat |
| Red Hat network satellite 5.8 | glassfish-jsf | 0:1.2_13-3.1.4.ep5.el6 |
| Red Hat network satellite 5.8 | hibernate3 | 1:3.3.2-1.3.GA_CP04.ep5.el6 |
| Red Hat network satellite 5.8 | jabberd | 0:2.2.8-23.el6sat |
| Red Hat network satellite 5.8 | jabberd-debuginfo | 0:2.2.8-23.el6sat |
| Red Hat network satellite 5.8 | jabberpy | 0:0.5-0.22.el6sat |
| Red Hat network satellite 5.8 | jakarta-commons-chain | 0:1.2-2.2.2.ep5.el6 |
| Red Hat network satellite 5.8 | jakarta-commons-codec | 0:1.3-11.7.el6 |
| Red Hat network satellite 5.8 | jakarta-commons-codec-debuginfo | 0:1.3-11.7.el6 |
| Red Hat network satellite 5.8 | jakarta-commons-digester | 0:1.8.1-8.1.1.1.ep5.el6 |
| Red Hat network satellite 5.8 | jakarta-commons-el | 0:1.0-19.2.1.1.ep5.el6 |
| Red Hat network satellite 5.8 | jakarta-commons-fileupload | 1:1.1.1-7.4.ep5.el6 |
| Red Hat network satellite 5.8 | jakarta-commons-io | 0:1.4-4.ep5.el6 |
| Red Hat network satellite 5.8 | jakarta-commons-lang | 0:2.4-1.1.el6 |
| Red Hat network satellite 5.8 | jakarta-commons-logging | 0:1.1.1-1.ep5.el6 |
| Red Hat network satellite 5.8 | jakarta-commons-logging-jboss | 0:1.1-10.3_patch_02.1.ep5.el6 |
| Red Hat network satellite 5.8 | jakarta-commons-parent | 0:11-2.1.2.ep5.el6 |
| Red Hat network satellite 5.8 | jakarta-commons-validator | 0:1.3.1-7.5.2.ep5.el6 |
| Red Hat network satellite 5.8 | jakarta-oro | 0:2.0.8-6.6.el6 |
| Red Hat network satellite 5.8 | jakarta-oro-debuginfo | 0:2.0.8-6.6.el6 |
| Red Hat network satellite 5.8 | jakarta-taglibs-standard | 0:1.1.1-12.ep5.el6 |
| Red Hat network satellite 5.8 | java-1.8.0-ibm | 1:1.8.0.4.1-1jpp.1.el6_8 |
| Red Hat network satellite 5.8 | java-1.8.0-ibm-devel | 1:1.8.0.4.1-1jpp.1.el6_8 |
| Red Hat network satellite 5.8 | javassist | 0:3.12.0-6.SP1.ep5.el6 |
| Red Hat network satellite 5.8 | jboss-javaee | 0:5.0.1-2.9.ep5.el6 |
| Red Hat network satellite 5.8 | jboss-javaee-poms | 0:5.0.1-2.9.ep5.el6 |
| Red Hat network satellite 5.8 | jboss-transaction-1.0.1-api | 0:5.0.1-2.9.ep5.el6 |
| Red Hat network satellite 5.8 | jcommon | 0:1.0.16-1.2.2.ep5.el6 |
| Red Hat network satellite 5.8 | jdom | 0:1.1.1-1.el6 |
| Red Hat network satellite 5.8 | jfreechart | 0:1.0.13-2.3.2.1.1.ep5.el6 |
| Red Hat network satellite 5.8 | jpam | 0:0.4-28.el6sat |
| Red Hat network satellite 5.8 | jpam-debuginfo | 0:0.4-28.el6sat |
| Red Hat network satellite 5.8 | jquery-timepicker | 0:1.3.3-1.el6sat |
| Red Hat network satellite 5.8 | jquery-ui | 0:1.10.4.custom-2.el6sat |
| Red Hat network satellite 5.8 | libgsasl | 0:1.4.0-5.el6sat |
| Red Hat network satellite 5.8 | libgsasl-debuginfo | 0:1.4.0-5.el6sat |
| Red Hat network satellite 5.8 | libntlm | 0:1.0-4.el6sat |
| Red Hat network satellite 5.8 | libntlm-debuginfo | 0:1.0-4.el6sat |
| Red Hat network satellite 5.8 | momentjs | 0:2.6.0-2.2.el6sat |
| Red Hat network satellite 5.8 | nutch | 0:1.0-0.16.20081201040121nightly.el6sat |
| Red Hat network satellite 5.8 | objectweb-asm | 0:3.2-2.1.el6 |
| Red Hat network satellite 5.8 | oracle-config | 0:1.1-7.el6sat |
| Red Hat network satellite 5.8 | oracle-instantclient | 0:10.2.0-47.el6sat |
| Red Hat network satellite 5.8 | oracle-instantclient-basic | 0:10.2.0-47.el6sat |
| Red Hat network satellite 5.8 | oracle-instantclient-selinux | 0:10.2.0.19-6.el6sat |
| Red Hat network satellite 5.8 | oracle-instantclient-sqlplus | 0:10.2.0-47.el6sat |
| Red Hat network satellite 5.8 | oracle-instantclient-sqlplus-selinux | 0:10.2.0.19-6.el6sat |
| Red Hat network satellite 5.8 | oracle-nofcontext-selinux | 0:0.1.23.36-1.el6sat |
| Red Hat network satellite 5.8 | oracle-selinux | 0:0.1.23.36-1.el6sat |
| Red Hat network satellite 5.8 | osa-common | 0:5.11.63-11.el6sat |
| Red Hat network satellite 5.8 | osa-dispatcher | 0:5.11.63-11.el6sat |
| Red Hat network satellite 5.8 | osa-dispatcher-selinux | 0:5.11.63-11.el6sat |
| Red Hat network satellite 5.8 | osad | 0:5.11.63-11.el6sat |
| Red Hat network satellite 5.8 | oscache | 0:2.2-3.ep5.el6 |
| Red Hat network satellite 5.8 | patternfly1 | 0:1.0.5-10.el6sat |
| Red Hat network satellite 5.8 | perl-Class-Singleton | 0:1.4-6.el6 |
| Red Hat network satellite 5.8 | perl-DBD-Oracle | 0:1.62-3.el6sat |
| Red Hat network satellite 5.8 | perl-DBD-Oracle-debuginfo | 0:1.62-3.el6sat |
| Red Hat network satellite 5.8 | perl-DateTime | 1:0.5300-1.el6 |
| Red Hat network satellite 5.8 | perl-DateTime-debuginfo | 1:0.5300-1.el6 |
| Red Hat network satellite 5.8 | perl-Filesys-Df | 0:0.92-8.el6sat |
| Red Hat network satellite 5.8 | perl-Filesys-Df-debuginfo | 0:0.92-8.el6sat |
| Red Hat network satellite 5.8 | perl-Frontier-RPC-Client | 0:0.07b4p1-10.el6 |
| Red Hat network satellite 5.8 | perl-List-MoreUtils | 0:0.22-10.el6 |
| Red Hat network satellite 5.8 | perl-List-MoreUtils-debuginfo | 0:0.22-10.el6 |
| Red Hat network satellite 5.8 | perl-Mail-RFC822-Address | 0:0.3-12.el6sat |
| Red Hat network satellite 5.8 | perl-Params-Validate | 0:0.92-3.el6 |
| Red Hat network satellite 5.8 | perl-Params-Validate-debuginfo | 0:0.92-3.el6 |
| Red Hat network satellite 5.8 | perl-Satcon | 0:2.5.0-2.el6sat |
| Red Hat network satellite 5.8 | perl-Term-Completion | 0:1.00-9.el6sat.2 |
| Red Hat network satellite 5.8 | perl-TermReadKey | 0:2.30-13.el6 |
| Red Hat network satellite 5.8 | perl-TermReadKey-debuginfo | 0:2.30-13.el6 |
| Red Hat network satellite 5.8 | pwstrength-bootstrap | 0:1.0.2-4.el6sat |
| Red Hat network satellite 5.8 | pyliblzma | 0:0.5.3-14.el6sat |
| Red Hat network satellite 5.8 | pyliblzma-debuginfo | 0:0.5.3-14.el6sat |
| Red Hat network satellite 5.8 | python-debian | 0:0.1.16-5.el6sat |
| Red Hat network satellite 5.8 | python-gzipstream | 0:2.3.3-1.el6sat |
| Red Hat network satellite 5.8 | quartz | 0:1.8.4-6.el6sat |
| Red Hat network satellite 5.8 | quartz-oracle | 0:1.8.4-6.el6sat |
| Red Hat network satellite 5.8 | redhat-access-plugin-sat5 | 0:2.1.0-56.el6sat |
| Red Hat network satellite 5.8 | redstone-xmlrpc | 0:1.1_20071120-16.el6sat |
| Red Hat network satellite 5.8 | rh-postgresql95 | 0:2.2-3.el6 |
| Red Hat network satellite 5.8 | rh-postgresql95-postgresql | 0:9.5.4-2.el6 |
| Red Hat network satellite 5.8 | rh-postgresql95-postgresql-contrib | 0:9.5.4-2.el6 |
| Red Hat network satellite 5.8 | rh-postgresql95-postgresql-debuginfo | 0:9.5.4-2.el6 |
| Red Hat network satellite 5.8 | rh-postgresql95-postgresql-libs | 0:9.5.4-2.el6 |
| Red Hat network satellite 5.8 | rh-postgresql95-postgresql-pltcl | 0:9.5.4-2.el6 |
| Red Hat network satellite 5.8 | rh-postgresql95-postgresql-server | 0:9.5.4-2.el6 |
| Red Hat network satellite 5.8 | rh-postgresql95-runtime | 0:2.2-3.el6 |
| Red Hat network satellite 5.8 | rhn-i18n-guides | 0:5.8.0.3-1.el6sat |
| Red Hat network satellite 5.8 | rhn-i18n-release-notes | 0:5.8.0.2-1.el6sat |
| Red Hat network satellite 5.8 | rhnpush | 0:5.5.89-20.el6sat |
| Red Hat network satellite 5.8 | roboto | 0:1.3-1.el6sat |
| Red Hat network satellite 5.8 | satellite-branding | 0:5.8.0.8-1.el6sat |
| Red Hat network satellite 5.8 | satellite-doc-indexes | 0:5.8.0-1.el6sat |
| Red Hat network satellite 5.8 | satellite-repo | 0:5.8.0.2-2.el6sat |
| Red Hat network satellite 5.8 | satellite-schema | 0:5.8.0.31-1.el6sat |
| Red Hat network satellite 5.8 | select2 | 0:3.4.5-3.el6sat |
| Red Hat network satellite 5.8 | select2-bootstrap-css | 0:1.3.0-5.el6sat |
| Red Hat network satellite 5.8 | simple-core | 0:3.1.3-7.el6sat |
| Red Hat network satellite 5.8 | sitemesh | 0:2.4.2-2.ep6.el6 |
| Red Hat network satellite 5.8 | spacecmd | 0:2.5.0-14.el6sat |
| Red Hat network satellite 5.8 | spacewalk | 0:2.5.0-10.el6sat |
| Red Hat network satellite 5.8 | spacewalk-admin | 0:2.5.0-3.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-app | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-applet | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-cdn | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-config-files | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-config-files-common | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-config-files-tool | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-iss | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-iss-export | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-libs | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-package-push-server | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-server | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-sql | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-sql-oracle | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-sql-postgresql | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-tools | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-xml-export-libs | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-backend-xmlrpc | 0:2.5.3-143.el6sat |
| Red Hat network satellite 5.8 | spacewalk-base | 0:2.5.2-11.el6sat |
| Red Hat network satellite 5.8 | spacewalk-base-minimal | 0:2.5.2-11.el6sat |
| Red Hat network satellite 5.8 | spacewalk-base-minimal-config | 0:2.5.2-11.el6sat |
| Red Hat network satellite 5.8 | spacewalk-certs-tools | 0:2.5.0-2.el6sat |
| Red Hat network satellite 5.8 | spacewalk-common | 0:2.5.0-10.el6sat |
| Red Hat network satellite 5.8 | spacewalk-config | 0:2.6.0-3.el6sat |
| Red Hat network satellite 5.8 | spacewalk-dobby | 0:2.5.2-11.el6sat |
| Red Hat network satellite 5.8 | spacewalk-html | 0:2.5.2-11.el6sat |
| Red Hat network satellite 5.8 | spacewalk-java | 0:2.5.14-89.el6sat |
| Red Hat network satellite 5.8 | spacewalk-java-config | 0:2.5.14-89.el6sat |
| Red Hat network satellite 5.8 | spacewalk-java-lib | 0:2.5.14-89.el6sat |
| Red Hat network satellite 5.8 | spacewalk-java-oracle | 0:2.5.14-89.el6sat |
| Red Hat network satellite 5.8 | spacewalk-java-postgresql | 0:2.5.14-89.el6sat |
| Red Hat network satellite 5.8 | spacewalk-oracle | 0:2.5.0-10.el6sat |
| Red Hat network satellite 5.8 | spacewalk-postgresql | 0:2.5.0-10.el6sat |
| Red Hat network satellite 5.8 | spacewalk-postgresql-server | 0:9.5-1.el6sat |
| Red Hat network satellite 5.8 | spacewalk-reports | 0:2.5.0-6.el6sat |
| Red Hat network satellite 5.8 | spacewalk-schema | 0:2.5.1-49.el6sat |
| Red Hat network satellite 5.8 | spacewalk-search | 0:2.5.1-4.el6sat |
| Red Hat network satellite 5.8 | spacewalk-selinux | 0:2.3.2-1.el6sat |
| Red Hat network satellite 5.8 | spacewalk-setup | 0:2.5.1-22.el6sat |
| Red Hat network satellite 5.8 | spacewalk-setup-jabberd | 0:2.3.2-1.el6sat |
| Red Hat network satellite 5.8 | spacewalk-setup-postgresql | 0:2.5.0-27.el6sat |
| Red Hat network satellite 5.8 | spacewalk-slf4j | 0:1.6.1-6.el6sat |
| Red Hat network satellite 5.8 | spacewalk-ssl-cert-check | 1:2.4-1.el6sat |
| Red Hat network satellite 5.8 | spacewalk-taskomatic | 0:2.5.14-89.el6sat |
| Red Hat network satellite 5.8 | spacewalk-usix | 0:2.7.1-3.el6sat |
| Red Hat network satellite 5.8 | spacewalk-utils | 0:2.5.1-23.el6sat |
| Red Hat network satellite 5.8 | spacewalk-web | 0:2.5.2-11.el6sat |
| Red Hat network satellite 5.8 | stringtree-json | 0:2.0.9-10.el6sat |
| Red Hat network satellite 5.8 | struts | 0:1.3.10-6.ep5.el6 |
| Red Hat network satellite 5.8 | struts-core | 0:1.3.10-6.ep5.el6 |
| Red Hat network satellite 5.8 | struts-extras | 0:1.3.10-6.ep5.el6 |
| Red Hat network satellite 5.8 | struts-taglib | 0:1.3.10-6.ep5.el6 |
| Red Hat network satellite 5.8 | tanukiwrapper | 0:3.2.3-15.el6sat |
| Red Hat network satellite 5.8 | tanukiwrapper-debuginfo | 0:3.2.3-15.el6sat |
| Red Hat network satellite 5.8 | udns | 0:0.1-1.el6sat |
| Red Hat network satellite 5.8 | udns-debuginfo | 0:0.1-1.el6sat |
| Red Hat network satellite 5.8 | xalan-j2 | 0:2.7.0-9.8.el6 |
| Red Hat network satellite managed db 5.8 | perl-Filesys-Df | 0:0.92-8.el6sat |
| Red Hat network satellite managed db 5.8 | perl-Filesys-Df-debuginfo | 0:0.92-8.el6sat |
| Red Hat network satellite managed db 5.8 | perl-Params-Validate | 0:0.92-3.el6 |
| Red Hat network satellite managed db 5.8 | perl-Params-Validate-debuginfo | 0:0.92-3.el6 |
| Red Hat network satellite managed db 5.8 | rh-postgresql95 | 0:2.2-3.el6 |
| Red Hat network satellite managed db 5.8 | rh-postgresql95-postgresql | 0:9.5.4-2.el6 |
| Red Hat network satellite managed db 5.8 | rh-postgresql95-postgresql-contrib | 0:9.5.4-2.el6 |
| Red Hat network satellite managed db 5.8 | rh-postgresql95-postgresql-debuginfo | 0:9.5.4-2.el6 |
| Red Hat network satellite managed db 5.8 | rh-postgresql95-postgresql-libs | 0:9.5.4-2.el6 |
| Red Hat network satellite managed db 5.8 | rh-postgresql95-postgresql-pltcl | 0:9.5.4-2.el6 |
| Red Hat network satellite managed db 5.8 | rh-postgresql95-postgresql-server | 0:9.5.4-2.el6 |
| Red Hat network satellite managed db 5.8 | rh-postgresql95-runtime | 0:2.2-3.el6 |
| Red Hat network satellite managed db 5.8 | satellite-repo | 0:5.8.0.2-2.el6sat |
| Red Hat network satellite managed db 5.8 | spacewalk-base-minimal | 0:2.5.2-11.el6sat |
| Red Hat network satellite managed db 5.8 | spacewalk-dobby | 0:2.5.2-11.el6sat |
| Red Hat network satellite managed db 5.8 | spacewalk-postgresql-server | 0:9.5-1.el6sat |
| Red Hat network satellite managed db 5.8 | spacewalk-setup-postgresql | 0:2.5.0-27.el6sat |
| Red Hat network satellite managed db 5.8 | spacewalk-web | 0:2.5.2-11.el6sat |
| SUSE Manager Server 3.0 | nutch | 1.0-0.9.5.4 |
| SUSE Manager Server 3.0 | release-notes-susemanager | 3.0.9-0.53.9.2 |
| SUSE Manager Server 3.0 | salt-netapi-client | 0.13.0-16.6.4 |
| SUSE Manager Server 3.0 | spacecmd | 2.5.5.9-16.9.4 |
| SUSE Manager Server 3.0 | spacewalk | 2.5.0.7-4.6.4 |
| SUSE Manager Server 3.0 | spacewalk-backend | 2.5.24.14-26.11.4 |
| SUSE Manager Server 3.0 | spacewalk-branding | 2.5.2.15-16.6.4 |
| SUSE Manager Server 3.0 | spacewalk-certs-tools | 2.5.1.11-21.6.4 |
| SUSE Manager Server 3.0 | spacewalk-java | 2.5.59.18-27.9.4 |
| SUSE Manager Server 3.0 | spacewalk-reports | 2.5.1.3-4.3.4 |
| SUSE Manager Server 3.0 | spacewalk-web | 2.5.7.19-25.9.4 |
| SUSE Manager Server 3.0 | supportutils-plugin-susemanager | 3.0.5-2.3.4 |
| SUSE Manager Server 3.0 | susemanager | 3.0.24-25.6.4 |
| SUSE Manager Server 3.0 | susemanager-docs_en | 3-25.8.2 |
| SUSE Manager Server 3.0 | susemanager-schema | 3.0.22-25.6.4 |
| SUSE Manager Server 3.0 | susemanager-sls | 0.1.24-27.9.4 |