Every CVE Search/ Get API key

CVE-2011-2919

Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN)...

4.3 Medium

Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.

Exploit likelihood

1.19%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.

Record
CVE-2011-2919
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.

Record
CVE-2011-2919
Updated
2026-11-02
EUVDEUVD-2011-2892 No score

Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.

Record
EUVD-2011-2892
Updated
2026-11-03
GitHub AdvisoriesGHSA-7vjr-395v-c89g No score

Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN)...

Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.

Record
GHSA-7vjr-395v-c89g
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spacewalk-base
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-base-minimal
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-config
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.2-7.el5sat
0:1.2.2-7.el5sat
spacewalk-dobby
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-grail
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-html
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-java
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-config
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-lib
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-oracle
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
Show 18 moreShow less
Affected packages
PackageAffectedFixed
spacewalk-pxt
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-sniglets
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-taskomatic
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-web
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-base
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-base-minimal
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-config
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.2-7.el6sat
0:1.2.2-7.el6sat
spacewalk-dobby
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-grail
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-html
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-java
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-config
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-lib
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-oracle
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-pxt
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-sniglets
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-taskomatic
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-web
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2919 is a medium vulnerability (CVSS 4.3) in Redhat Spacewalk, published February 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.19%, the 68th percentile. No source names a fixed version.

References

Show 21 moreShow less
MoveEnter Open