CVE-2011-2919
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN)...
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
Exploit likelihood
What each source reports
NVD Score used
4.3
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
- Record
CVE-2011-2919- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
- Record
CVE-2011-2919- Updated
- 2026-11-02
EUVDEUVD-2011-2892 No score
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
- Record
EUVD-2011-2892- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7vjr-395v-c89g No score
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN)...
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
- Record
GHSA-7vjr-395v-c89g- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
spacewalk-baseRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el5sat | 0:1.2.7-20.el5sat |
spacewalk-base-minimalRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el5sat | 0:1.2.7-20.el5sat |
spacewalk-configRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.2-7.el5sat | 0:1.2.2-7.el5sat |
spacewalk-dobbyRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el5sat | 0:1.2.7-20.el5sat |
spacewalk-grailRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el5sat | 0:1.2.7-20.el5sat |
spacewalk-htmlRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el5sat | 0:1.2.7-20.el5sat |
spacewalk-javaRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.39-98.el5sat | 0:1.2.39-98.el5sat |
spacewalk-java-configRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.39-98.el5sat | 0:1.2.39-98.el5sat |
spacewalk-java-libRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.39-98.el5sat | 0:1.2.39-98.el5sat |
spacewalk-java-oracleRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.39-98.el5sat | 0:1.2.39-98.el5sat |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
spacewalk-pxtRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el5sat | 0:1.2.7-20.el5sat |
spacewalk-snigletsRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el5sat | 0:1.2.7-20.el5sat |
spacewalk-taskomaticRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.39-98.el5sat | 0:1.2.39-98.el5sat |
spacewalk-webRed Hat:network_satellite:5.4::el5 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el5sat | 0:1.2.7-20.el5sat |
spacewalk-baseRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el6sat | 0:1.2.7-20.el6sat |
spacewalk-base-minimalRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el6sat | 0:1.2.7-20.el6sat |
spacewalk-configRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.2-7.el6sat | 0:1.2.2-7.el6sat |
spacewalk-dobbyRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el6sat | 0:1.2.7-20.el6sat |
spacewalk-grailRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el6sat | 0:1.2.7-20.el6sat |
spacewalk-htmlRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el6sat | 0:1.2.7-20.el6sat |
spacewalk-javaRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.39-98.el6sat | 0:1.2.39-98.el6sat |
spacewalk-java-configRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.39-98.el6sat | 0:1.2.39-98.el6sat |
spacewalk-java-libRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.39-98.el6sat | 0:1.2.39-98.el6sat |
spacewalk-java-oracleRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.39-98.el6sat | 0:1.2.39-98.el6sat |
spacewalk-pxtRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el6sat | 0:1.2.7-20.el6sat |
spacewalk-snigletsRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el6sat | 0:1.2.7-20.el6sat |
spacewalk-taskomaticRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.39-98.el6sat | 0:1.2.39-98.el6sat |
spacewalk-webRed Hat:network_satellite:5.4::el6 From an advisory covering 5 CVEs |
before 0:1.2.7-20.el6sat | 0:1.2.7-20.el6sat |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2919 is a medium vulnerability (CVSS 4.3) in Redhat Spacewalk, published February 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.19%, the 68th percentile. No source names a fixed version.
References
redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html
redhat.com/support/errata/RHSA-2011-1299.html
bugzilla.redhat.com/show_bug.cgi?id=713478
nvd.nist.gov/vuln/detail/CVE-2011-2919
access.redhat.com/errata/RHSA-2011:1299
access.redhat.com/security/cve/CVE-2011-2919
Show 21 moreShow less
github.com/advisories/GHSA-7vjr-395v-c89g
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=672167
bugzilla.redhat.com/show_bug.cgi?id=681032
bugzilla.redhat.com/show_bug.cgi?id=713477
bugzilla.redhat.com/show_bug.cgi?id=730955
bugzilla.redhat.com/show_bug.cgi?id=731647
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1299.json
access.redhat.com/security/cve/CVE-2011-1594
cve.org/CVERecord?id=CVE-2011-1594
nvd.nist.gov/vuln/detail/CVE-2011-1594
cve.org/CVERecord?id=CVE-2011-2919
access.redhat.com/security/cve/CVE-2011-2920
cve.org/CVERecord?id=CVE-2011-2920
nvd.nist.gov/vuln/detail/CVE-2011-2920
access.redhat.com/security/cve/CVE-2011-2927
cve.org/CVERecord?id=CVE-2011-2927
nvd.nist.gov/vuln/detail/CVE-2011-2927
access.redhat.com/security/cve/CVE-2011-3344
cve.org/CVERecord?id=CVE-2011-3344
nvd.nist.gov/vuln/detail/CVE-2011-3344