Dashboard / CVE-2011-4346

CVE-2011-4346

MEDIUM
MEDIUM Priority: 0.06 BB Relevance: 49/100
Published: 2011-12-10 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Network Low Complexity

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Required
S: Unchanged
C: Low
I: Low
A: None

Description

Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
redhat satellite 5.4.1

References & Advisories (7)

https://access.redhat.com/errata/RHSA-2011:1794
vendor-advisory x_refsource_REDHAT

Bug Bounty Relevance

49 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

4.6 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

EPSS — Exploitation Probability

1.24%
Raw Score 0.012440
Percentile 69.3%
Date 2026-10-31

EPSS Trend

2026-10-31
0.01244
2026-10-30
0.01596

Intelligence Sources

mitre ref →
nvd ref →

External Links