Every CVESearch/Get API key

CVE-2012-6149

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red...

3.5 Low

CVE-2012-6149 is a low vulnerability (CVSS 3.5) in Redhat Satellite, published February 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.57%, the 75th percentile. No source names a fixed version.

Severity
3.5 LowCVSS 2.0, NVD
Exploit chance
1.57%EPSS, 75th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.

Exploit likelihood

1.57%Up 0.3 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spacewalk-base-minimal
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-dobby
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-web
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
satellite-branding
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:5.6.0.23-1.el5sat
0:5.6.0.23-1.el5sat
spacewalk-base
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal-config
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-dobby
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-grail
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-html
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
Show 28 moreShow less
Affected packages
PackageAffectedFixed
spacewalk-java
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-config
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-lib
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-oracle
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-postgresql
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-pxt
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-sniglets
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-taskomatic
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-web
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-dobby
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-web
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
satellite-branding
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:5.6.0.23-1.el6sat
0:5.6.0.23-1.el6sat
spacewalk-base
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-base-minimal
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-base-minimal-config
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-dobby
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-grail
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-html
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-java
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-config
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-lib
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-oracle
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-postgresql
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-pxt
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-sniglets
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-taskomatic
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-web
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat

What each source reports

NVD Score used3.5

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.

Record
CVE-2012-6149
CVSS 2.0
3.5 LowAV:N/AC:M/Au:S/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE ListNo score

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.

Record
CVE-2012-6149
Updated
2026-11-02
EUVDEUVD-2012-6005No score

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.

Record
EUVD-2012-6005
Updated
2026-11-03
GitHub AdvisoriesGHSA-hr9j-j2w3-gwf8No score

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red...

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.

Record
GHSA-hr9j-j2w3-gwf8
Weakness
CWE-79
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 19 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open