exploitDog

CVE-2014-7811

Опубликовано: 12 янв. 2015

Источник: redhat

CVSS2: 3.5

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2014-7811
https://nvd.nist.gov/vuln/detail/CVE-2014-7811

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=1156299Spacewalk: multiple XSS

EPSS

Процентиль: 71%

0.01463

Низкий

3.5 Low

CVSS2

Связанные уязвимости

CVE-2014-7811

nvd

больше 11 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.

GHSA-mqgf-q94x-fm6r

github

около 4 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.

EPSS

Процентиль: 71%

0.01463

Низкий

3.5 Low

CVSS2