Every CVE Search/ Get API key

CVE-2014-3595

Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk...

4.3 MediumFix available

Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.

Exploit likelihood

1.76%Up 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.

Record
CVE-2014-3595
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.

Record
CVE-2014-3595
Updated
2026-11-02
EUVDEUVD-2014-3568 No score

Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.

Record
EUVD-2014-3568
Updated
2026-11-03
GitHub AdvisoriesGHSA-xgqv-fw8c-8qm6 No score

Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk...

Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.

Record
GHSA-xgqv-fw8c-8qm6
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spacewalk-java
Red Hat:network_satellite:5.4::el5
 before 0:1.2.39-137.el5sat
0:1.2.39-137.el5sat
spacewalk-java-config
Red Hat:network_satellite:5.4::el5
 before 0:1.2.39-137.el5sat
0:1.2.39-137.el5sat
spacewalk-java-lib
Red Hat:network_satellite:5.4::el5
 before 0:1.2.39-137.el5sat
0:1.2.39-137.el5sat
spacewalk-java-oracle
Red Hat:network_satellite:5.4::el5
 before 0:1.2.39-137.el5sat
0:1.2.39-137.el5sat
spacewalk-taskomatic
Red Hat:network_satellite:5.4::el5
 before 0:1.2.39-137.el5sat
0:1.2.39-137.el5sat
spacewalk-java
Red Hat:network_satellite:5.5::el5
 before 0:1.7.54-129.el5sat
0:1.7.54-129.el5sat
spacewalk-java-config
Red Hat:network_satellite:5.5::el5
 before 0:1.7.54-129.el5sat
0:1.7.54-129.el5sat
spacewalk-java-lib
Red Hat:network_satellite:5.5::el5
 before 0:1.7.54-129.el5sat
0:1.7.54-129.el5sat
spacewalk-java-oracle
Red Hat:network_satellite:5.5::el5
 before 0:1.7.54-129.el5sat
0:1.7.54-129.el5sat
spacewalk-taskomatic
Red Hat:network_satellite:5.5::el5
 before 0:1.7.54-129.el5sat
0:1.7.54-129.el5sat
Show 22 moreShow less
Affected packages
PackageAffectedFixed
spacewalk-java
Red Hat:network_satellite:5.6::el5
 before 0:2.0.2-85.el5sat
0:2.0.2-85.el5sat
spacewalk-java-config
Red Hat:network_satellite:5.6::el5
 before 0:2.0.2-85.el5sat
0:2.0.2-85.el5sat
spacewalk-java-lib
Red Hat:network_satellite:5.6::el5
 before 0:2.0.2-85.el5sat
0:2.0.2-85.el5sat
spacewalk-java-oracle
Red Hat:network_satellite:5.6::el5
 before 0:2.0.2-85.el5sat
0:2.0.2-85.el5sat
spacewalk-java-postgresql
Red Hat:network_satellite:5.6::el5
 before 0:2.0.2-85.el5sat
0:2.0.2-85.el5sat
spacewalk-taskomatic
Red Hat:network_satellite:5.6::el5
 before 0:2.0.2-85.el5sat
0:2.0.2-85.el5sat
spacewalk-java
Red Hat:network_satellite:5.5::el6
 before 0:1.7.54-129.el6sat
0:1.7.54-129.el6sat
spacewalk-java-config
Red Hat:network_satellite:5.5::el6
 before 0:1.7.54-129.el6sat
0:1.7.54-129.el6sat
spacewalk-java-lib
Red Hat:network_satellite:5.5::el6
 before 0:1.7.54-129.el6sat
0:1.7.54-129.el6sat
spacewalk-java-oracle
Red Hat:network_satellite:5.5::el6
 before 0:1.7.54-129.el6sat
0:1.7.54-129.el6sat
spacewalk-taskomatic
Red Hat:network_satellite:5.5::el6
 before 0:1.7.54-129.el6sat
0:1.7.54-129.el6sat
spacewalk-java
Red Hat:network_satellite:5.6::el6
 before 0:2.0.2-85.el6sat
0:2.0.2-85.el6sat
spacewalk-java-config
Red Hat:network_satellite:5.6::el6
 before 0:2.0.2-85.el6sat
0:2.0.2-85.el6sat
spacewalk-java-lib
Red Hat:network_satellite:5.6::el6
 before 0:2.0.2-85.el6sat
0:2.0.2-85.el6sat
spacewalk-java-oracle
Red Hat:network_satellite:5.6::el6
 before 0:2.0.2-85.el6sat
0:2.0.2-85.el6sat
spacewalk-java-postgresql
Red Hat:network_satellite:5.6::el6
 before 0:2.0.2-85.el6sat
0:2.0.2-85.el6sat
spacewalk-taskomatic
Red Hat:network_satellite:5.6::el6
 before 0:2.0.2-85.el6sat
0:2.0.2-85.el6sat
spacewalk-java
Red Hat:network_satellite:5.4::el6
 before 0:1.2.39-137.el6sat
0:1.2.39-137.el6sat
spacewalk-java-config
Red Hat:network_satellite:5.4::el6
 before 0:1.2.39-137.el6sat
0:1.2.39-137.el6sat
spacewalk-java-lib
Red Hat:network_satellite:5.4::el6
 before 0:1.2.39-137.el6sat
0:1.2.39-137.el6sat
spacewalk-java-oracle
Red Hat:network_satellite:5.4::el6
 before 0:1.2.39-137.el6sat
0:1.2.39-137.el6sat
spacewalk-taskomatic
Red Hat:network_satellite:5.4::el6
 before 0:1.2.39-137.el6sat
0:1.2.39-137.el6sat

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3595 is a medium vulnerability (CVSS 4.3) in Redhat Satellite, published September 22, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. Fixed in spacewalk-java 0:1.2.39-137.el5sat.

References

Show 7 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open