CVE-2012-6149 Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the....
LowCVSS 3.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat satellite | = 5.6 | No fix listed |
| redhat satellite 5 managed db | = 5.6 | No fix listed |
| redhat spacewalk-java | = 2.0.2-57 | No fix listed |
References
- RHSA-2014:0148 vendor-advisory
- 56952 third-party-advisory
- bugzilla.redhat.com issue-tracking vendor-advisory
- git.fedorahosted.org patch third-party-advisory
- git.fedorahosted.org exploit patch
- SUSE-SU-2014:0222 vendor-advisory