Advisories · Technology
Red Hat Network Satellite Server v 5.4.
Every CVE that names Red Hat Network Satellite Server v 5.4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages
- Red Hat Network Proxy v 5.4
- Red Hat Network Satellite Server v 5.4
- Information disclosure
- CVSS 5.4 Medium
Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form
- Red Hat Network Satellite Server v 5.4
- Red Hat Enterprise Linux 6
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms
- Red Hat Network Satellite Server v 5.4
- Red Hat Enterprise Linux 6
- Cross-site scripting (XSS)
- CVSS 5.5 Medium
Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.
- Red Hat Network Satellite Server v 5.4
- Red Hat Enterprise Linux 6
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter
- Red Hat Network Satellite Server v 5.4
- Red Hat Enterprise Linux 6
- Open redirect
- CVSS 7.5 High
Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass
- Red Hat Network Satellite Server v 5.3
- Red Hat Network Satellite Server v 5.4
- Authentication bypass
- CVSS 4.6 Medium
Satellite: xss in custom system information key handling
- Red Hat Network Satellite Server v 5.4
- Red Hat Satellite 6
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery
- Red Hat Network Satellite Server v 5.4
- Red Hat Enterprise Linux 6
- CWE-346