CVE-2011-2920
MEDIUM
MEDIUM
Priority: 0.11
BB Relevance:
51/100
Published: 2014-02-05
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Network
Low Complexity
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
Required
S:
Unchanged
C:
Low
I:
Low
A:
Low
Description
A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| redhat | network_satellite | - |
| redhat | spacewalk | 1.6 |
References & Advisories (5)
vendor-advisory
x_refsource_REDHAT
vdb-entry
x_refsource_REDHAT