CVE-2011-2920

Опубликовано: 05 фев. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allow remote attackers to inject arbitrary web script or HTML via the "Filter by Synopsis" field and other unspecified filter forms.

Ссылки

http://www.redhat.com/support/errata/RHSA-2011-1299.html
Patch
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=681032
Vendor Advisory
https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-1299.html
Patch
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=681032
Vendor Advisory
https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:network_satellite:-:*:*:*:*:*:*:*

cpe:2.3:a:redhat:spacewalk:1.6:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00322

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2011-2920

redhat

больше 14 лет назад

GHSA-pqp9-2cmp-fx98

github

больше 3 лет назад