Every CVE Search/ Get API key

CVE-2011-2927

Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms

5.4 Medium

A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HTML into web pages viewed by other users. The flaw is triggered through vectors related to Search forms, enabling attackers to potentially steal sensitive information or perform actions on behalf of the victim.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

1.47%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List Score used 5.4

Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms

A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HTML into web pages viewed by other users. The flaw is triggered through vectors related to Search forms, enabling attackers to potentially steal sensitive information or perform actions on behalf of the victim.

Record
CVE-2011-2927
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-05
EUVDEUVD-2011-2900 5.4

A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HTML into web pages viewed by other users. The flaw is triggered through vectors related to Search forms, enabling attackers to potentially steal sensitive information or perform actions on behalf of the victim.

Record
EUVD-2011-2900
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-05
GitHub AdvisoriesGHSA-2738-x33m-p89q 5.4

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk 1.6, as used in Red Hat Network ...

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allow remote attackers to inject arbitrary web script or HTML via vectors related to Search forms.

Record
GHSA-2738-x33m-p89q
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
NVD 5.4

A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HTML into web pages viewed by other users. The flaw is triggered through vectors related to Search forms, enabling attackers to potentially steal sensitive information or perform actions on behalf of the victim.

Record
CVE-2011-2927
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-05

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spacewalk-base
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-base-minimal
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-config
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.2-7.el5sat
0:1.2.2-7.el5sat
spacewalk-dobby
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-grail
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-html
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-java
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-config
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-lib
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-oracle
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
Show 18 moreShow less
Affected packages
PackageAffectedFixed
spacewalk-pxt
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-sniglets
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-taskomatic
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-web
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-base
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-base-minimal
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-config
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.2-7.el6sat
0:1.2.2-7.el6sat
spacewalk-dobby
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-grail
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-html
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-java
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-config
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-lib
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-oracle
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-pxt
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-sniglets
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-taskomatic
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-web
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat

History

History
RecordedChangedSources
affected, factsCVE List, NVD
factsEUVD
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2927 is a medium vulnerability (CVSS 5.4) in Redhat Network Satellite, published February 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. No source names a fixed version.

References

Show 21 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open