Every CVE Search/ Get API key

CVE-2012-6149

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red...

3.5 Low

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.

Exploit likelihood

1.57%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.5

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.

Record
CVE-2012-6149
CVSS 2.0
3.5 LowAV:N/AC:M/Au:S/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.

Record
CVE-2012-6149
Updated
2026-11-02
EUVDEUVD-2012-6005 No score

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.

Record
EUVD-2012-6005
Updated
2026-11-03
GitHub AdvisoriesGHSA-hr9j-j2w3-gwf8 No score

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red...

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.

Record
GHSA-hr9j-j2w3-gwf8
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spacewalk-base-minimal
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-dobby
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-web
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
satellite-branding
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:5.6.0.23-1.el5sat
0:5.6.0.23-1.el5sat
spacewalk-base
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal-config
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-dobby
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-grail
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-html
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
Show 28 moreShow less
Affected packages
PackageAffectedFixed
spacewalk-java
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-config
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-lib
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-oracle
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-postgresql
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-pxt
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-sniglets
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-taskomatic
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-web
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-dobby
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-web
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
satellite-branding
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:5.6.0.23-1.el6sat
0:5.6.0.23-1.el6sat
spacewalk-base
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-base-minimal
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-base-minimal-config
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-dobby
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-grail
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-html
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-java
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-config
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-lib
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-oracle
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-postgresql
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-pxt
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-sniglets
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-taskomatic
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-web
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-6149 is a low vulnerability (CVSS 3.5) in Redhat Satellite, published February 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.57%, the 75th percentile. No source names a fixed version.

References

Show 19 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open