Every CVE Search/ Get API key

CVE-2013-4415

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN)...

4.3 Medium

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria variable in a software channels search; (2) end_year, (3) start_hour, (4) end_am_pm, (5) end_day, (6) end_hour, (7) end_minute, (8) end_month, (9) end_year, (10) optionScanDateSearch, (11) result_filter, (12) search_string, (13) show_as, (14) start_am_pm, (15) start_day, (16) start_hour, (17) start_minute, (18) start_month, (19) start_year, or (20) whereToSearch variable in an scap audit results search; (21) end_minute, (22) end_month, (23) end_year, (24) errata_type_bug, (25) errata_type_enhancement, (26) errata_type_security, (27) fineGrained, (28) list_1892635924_sortdir, (29) optionIssueDateSearch, (30) start_am_pm, (31) start_day, (32) start_hour, (33) start_minute, (34) start_month, (35) start_year, or (36) view_mode variable in an errata search; or (37) fineGrained variable in a systems search, related to PAGE_SIZE_LABEL_SELECTED.

Exploit likelihood

1.73%Up 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria variable in a software channels search; (2) end_year, (3) start_hour, (4) end_am_pm, (5) end_day, (6) end_hour, (7) end_minute, (8) end_month, (9) end_year, (10) optionScanDateSearch, (11) result_filter, (12) search_string, (13) show_as, (14) start_am_pm, (15) start_day, (16) start_hour, (17) start_minute, (18) start_month, (19) start_year, or (20) whereToSearch variable in an scap audit results search; (21) end_minute, (22) end_month, (23) end_year, (24) errata_type_bug, (25) errata_type_enhancement, (26) errata_type_security, (27) fineGrained, (28) list_1892635924_sortdir, (29) optionIssueDateSearch, (30) start_am_pm, (31) start_day, (32) start_hour, (33) start_minute, (34) start_month, (35) start_year, or (36) view_mode variable in an errata search; or (37) fineGrained variable in a systems search, related to PAGE_SIZE_LABEL_SELECTED.

Record
CVE-2013-4415
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria variable in a software channels search; (2) end_year, (3) start_hour, (4) end_am_pm, (5) end_day, (6) end_hour, (7) end_minute, (8) end_month, (9) end_year, (10) optionScanDateSearch, (11) result_filter, (12) search_string, (13) show_as, (14) start_am_pm, (15) start_day, (16) start_hour, (17) start_minute, (18) start_month, (19) start_year, or (20) whereToSearch variable in an scap audit results search; (21) end_minute, (22) end_month, (23) end_year, (24) errata_type_bug, (25) errata_type_enhancement, (26) errata_type_security, (27) fineGrained, (28) list_1892635924_sortdir, (29) optionIssueDateSearch, (30) start_am_pm, (31) start_day, (32) start_hour, (33) start_minute, (34) start_month, (35) start_year, or (36) view_mode variable in an errata search; or (37) fineGrained variable in a systems search, related to PAGE_SIZE_LABEL_SELECTED.

Record
CVE-2013-4415
Updated
2026-11-02
EUVDEUVD-2013-4292 No score

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria variable in a software channels search; (2) end_year, (3) start_hour, (4) end_am_pm, (5) end_day, (6) end_hour, (7) end_minute, (8) end_month, (9) end_year, (10) optionScanDateSearch, (11) result_filter, (12) search_string, (13) show_as, (14) start_am_pm, (15) start_day, (16) start_hour, (17) start_minute, (18) start_month, (19) start_year, or (20) whereToSearch variable in an scap audit results search; (21) end_minute, (22) end_month, (23) end_year, (24) errata_type_bug, (25) errata_type_enhancement, (26) errata_type_security, (27) fineGrained, (28) list_1892635924_sortdir, (29) optionIssueDateSearch, (30) start_am_pm, (31) start_day, (32) start_hour, (33) start_minute, (34) start_month, (35) start_year, or (36) view_mode variable in an errata search; or (37) fineGrained variable in a systems search, related to PAGE_SIZE_LABEL_SELECTED.

Record
EUVD-2013-4292
Updated
2026-11-03
GitHub AdvisoriesGHSA-fch3-m8r7-wg82 No score

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN)...

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria variable in a software channels search; (2) end_year, (3) start_hour, (4) end_am_pm, (5) end_day, (6) end_hour, (7) end_minute, (8) end_month, (9) end_year, (10) optionScanDateSearch, (11) result_filter, (12) search_string, (13) show_as, (14) start_am_pm, (15) start_day, (16) start_hour, (17) start_minute, (18) start_month, (19) start_year, or (20) whereToSearch variable in an scap audit results search; (21) end_minute, (22) end_month, (23) end_year, (24) errata_type_bug, (25) errata_type_enhancement, (26) errata_type_security, (27) fineGrained, (28) list_1892635924_sortdir, (29) optionIssueDateSearch, (30) start_am_pm, (31) start_day, (32) start_hour, (33) start_minute, (34) start_month, (35) start_year, or (36) view_mode variable in an errata search; or (37) fineGrained variable in a systems search, related to PAGE_SIZE_LABEL_SELECTED.

Record
GHSA-fch3-m8r7-wg82
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spacewalk-base-minimal
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-dobby
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-web
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
satellite-branding
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:5.6.0.23-1.el5sat
0:5.6.0.23-1.el5sat
spacewalk-base
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal-config
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-dobby
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-grail
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-html
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
Show 28 moreShow less
Affected packages
PackageAffectedFixed
spacewalk-java
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-config
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-lib
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-oracle
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-postgresql
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-pxt
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-sniglets
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-taskomatic
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-web
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-dobby
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-web
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
satellite-branding
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:5.6.0.23-1.el6sat
0:5.6.0.23-1.el6sat
spacewalk-base
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-base-minimal
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-base-minimal-config
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-dobby
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-grail
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-html
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-java
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-config
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-lib
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-oracle
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-postgresql
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-pxt
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-sniglets
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-taskomatic
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-web
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4415 is a medium vulnerability (CVSS 4.3) in Redhat Satellite, published February 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.73%, the 77th percentile. No source names a fixed version.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open