CVE-2014-7812 Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups fi...
LowCVSS 3.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat satellite | = 5.6 | No fix listed |
| redhat spacewalk | All versions | No fix listed |
| SUSE manager | = 1.7 | No fix listed |
References
- SUSE-SU-2015:0928 vendor-advisory
- RHSA-2015:0033 vendor-advisory
- 62183 third-party-advisory