Every CVE Search/ Get API key

CVE-2011-2920

Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.

5.5 Medium

A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

2.04%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List Score used 5.5

Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.

A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.

Record
CVE-2011-2920
CVSS 3.1
5.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-79
Updated
2026-11-05
EUVDEUVD-2011-2893 5.5

A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.

Record
EUVD-2011-2893
CVSS 3.1
5.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-05
GitHub AdvisoriesGHSA-pqp9-2cmp-fx98 5.5

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk 1.6, as used in Red Hat Network ...

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allow remote attackers to inject arbitrary web script or HTML via the "Filter by Synopsis" field and other unspecified filter forms.

Record
GHSA-pqp9-2cmp-fx98
CVSS 3.1
5.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-79
Updated
2026-11-02
NVD 5.5

A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.

Record
CVE-2011-2920
CVSS 3.1
5.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-05

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spacewalk-base
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-base-minimal
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-config
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.2-7.el5sat
0:1.2.2-7.el5sat
spacewalk-dobby
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-grail
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-html
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-java
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-config
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-lib
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-oracle
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
Show 18 moreShow less
Affected packages
PackageAffectedFixed
spacewalk-pxt
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-sniglets
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-taskomatic
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-web
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-base
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-base-minimal
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-config
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.2-7.el6sat
0:1.2.2-7.el6sat
spacewalk-dobby
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-grail
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-html
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-java
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-config
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-lib
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-oracle
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-pxt
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-sniglets
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-taskomatic
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-web
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat

History

History
RecordedChangedSources
affected, factsCVE List, NVD
factsEUVD
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2920 is a medium vulnerability (CVSS 5.5) in Redhat Network Satellite, published February 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. No source names a fixed version.

References

Show 21 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open