Network satellite

This hub aggregates every CVE we track for Network satellite, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Network satellite.

• CVE-2014-8162XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified i...7.5May 14, 2015
• CVE-2014-7811Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted...3.5Jan 15, 2015
• CVE-2013-2143The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by ...6.5Apr 17, 2014
• CVE-2011-3344Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form5.4Feb 5, 2014
• CVE-2011-2920Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.5.5Feb 5, 2014
• CVE-2011-2927Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms5.4Feb 5, 2014
• CVE-2011-2919Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the Syst...4.3Feb 5, 2014
• CVE-2011-1594Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter6.5Feb 5, 2014
• CVE-2013-4480Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts.7.5Nov 15, 2013
• CVE-2007-5961Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web sc...4.3May 23, 2008