CVE-2013-1871
Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat...
Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter.
Exploit likelihood
What each source reports
NVD Score used
3.5
Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter.
- Record
CVE-2013-1871- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter.
- Record
CVE-2013-1871- Updated
- 2026-11-02
EUVDEUVD-2013-1873 No score
Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter.
- Record
EUVD-2013-1873- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6jqg-mmw8-392m No score
Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat...
Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter.
- Record
GHSA-6jqg-mmw8-392m- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
spacewalk-base-minimalRed Hat:network_satellite_managed_db:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
spacewalk-dobbyRed Hat:network_satellite_managed_db:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
spacewalk-webRed Hat:network_satellite_managed_db:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
satellite-brandingRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:5.6.0.23-1.el5sat | 0:5.6.0.23-1.el5sat |
spacewalk-baseRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
spacewalk-base-minimalRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
spacewalk-base-minimal-configRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
spacewalk-dobbyRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
spacewalk-grailRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
spacewalk-htmlRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
Show 28 moreShow less
| Package | Affected | Fixed |
|---|---|---|
spacewalk-javaRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el5sat | 0:2.0.2-58.el5sat |
spacewalk-java-configRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el5sat | 0:2.0.2-58.el5sat |
spacewalk-java-libRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el5sat | 0:2.0.2-58.el5sat |
spacewalk-java-oracleRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el5sat | 0:2.0.2-58.el5sat |
spacewalk-java-postgresqlRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el5sat | 0:2.0.2-58.el5sat |
spacewalk-pxtRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
spacewalk-snigletsRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
spacewalk-taskomaticRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el5sat | 0:2.0.2-58.el5sat |
spacewalk-webRed Hat:network_satellite:5.6::el5 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el5sat | 0:2.0.3-19.el5sat |
spacewalk-base-minimalRed Hat:network_satellite_managed_db:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
spacewalk-dobbyRed Hat:network_satellite_managed_db:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
spacewalk-webRed Hat:network_satellite_managed_db:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
satellite-brandingRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:5.6.0.23-1.el6sat | 0:5.6.0.23-1.el6sat |
spacewalk-baseRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
spacewalk-base-minimalRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
spacewalk-base-minimal-configRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
spacewalk-dobbyRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
spacewalk-grailRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
spacewalk-htmlRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
spacewalk-javaRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el6sat | 0:2.0.2-58.el6sat |
spacewalk-java-configRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el6sat | 0:2.0.2-58.el6sat |
spacewalk-java-libRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el6sat | 0:2.0.2-58.el6sat |
spacewalk-java-oracleRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el6sat | 0:2.0.2-58.el6sat |
spacewalk-java-postgresqlRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el6sat | 0:2.0.2-58.el6sat |
spacewalk-pxtRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
spacewalk-snigletsRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
spacewalk-taskomaticRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.2-58.el6sat | 0:2.0.2-58.el6sat |
spacewalk-webRed Hat:network_satellite:5.6::el6 From an advisory covering 4 CVEs |
before 0:2.0.3-19.el6sat | 0:2.0.3-19.el6sat |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1871 is a low vulnerability (CVSS 3.5) in Redhat Satellite, published February 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 75th percentile. No source names a fixed version.
References
secunia.com/advisories/56952
rhn.redhat.com/errata/RHSA-2014-0148.html
bugzilla.redhat.com/show_bug.cgi?id=923467
git.fedorahosted.org/cgit/spacewalk.git/commit?id=18c70164285cae0660fa3ac55c6656bb19b3b13f
osvdb.org/103211
suse.com/support/update/announcement/2014/suse-su-20140222-1.html
Show 19 moreShow less
nvd.nist.gov/vuln/detail/CVE-2013-1871
github.com/advisories/GHSA-6jqg-mmw8-392m
access.redhat.com/errata/RHSA-2014:0148
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=882000
bugzilla.redhat.com/show_bug.cgi?id=923464
bugzilla.redhat.com/show_bug.cgi?id=979452
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0148.json
access.redhat.com/security/cve/CVE-2012-6149
cve.org/CVERecord?id=CVE-2012-6149
nvd.nist.gov/vuln/detail/CVE-2012-6149
access.redhat.com/security/cve/CVE-2013-1869
cve.org/CVERecord?id=CVE-2013-1869
nvd.nist.gov/vuln/detail/CVE-2013-1869
access.redhat.com/security/cve/CVE-2013-1871
cve.org/CVERecord?id=CVE-2013-1871
access.redhat.com/security/cve/CVE-2013-4415
cve.org/CVERecord?id=CVE-2013-4415
nvd.nist.gov/vuln/detail/CVE-2013-4415