Skip to contentRed Hat Satellite vulnerabilities
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP Header Injection via HttpProxyHandler Disabled ValidationCVE-2026-42578Fix available2.9 Low
- netty, red hat cryostat 4, cryostat 4 on rhel 9 +37 more +39 moreNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, logging subsystem for red hat openshift +33 more +35 moreNetty: HTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-33870Fix available7.5 High
- candlepinproject candlepin, red hat satellite 6, redhat satellite +2 moreImproper authorization check in the server componentCVE-2023-18326.8 Medium
- theforeman foreman, red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8 +1 more +3 moreForeman: world readable file containing secretsCVE-2023-48866.7 Medium
- theforeman foreman, red hat satellite 6, redhat satellite +2 moreOs command injection via ct_command and fcct_commandCVE-2022-38748.0 High
- theforeman foreman, red hat satellite 6, redhat satellite +2 moreArbitrary code execution through yaml global parametersCVE-2023-04628.0 High
- theforeman foreman, red hat satellite 6.11 for rhel 7, satellite 6.11 for rhel 8 +4 more +6 moreForeman: arbitrary code execution through templatesCVE-2023-01189.1 Critical
- red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8, redhat satellite +2 moreForeman: stored cross-site scripting in host tabCVE-2023-0119Fix available5.4 Medium
- red hat satellite server, redhat satellite +1 moreA blind site-to-site request forgery vulnerability was found in Satellite server. It is possible...CVE-2022-41304.5 Medium
- red hat satelliteAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with...CVE-2020-14380Fix available7.5 High
- red hat satelliteA credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute...CVE-2020-143716.5 Medium
- red hat satelliteA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...CVE-2020-143355.5 Medium
- red hat satelliteA flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to...CVE-2021-202565.3 Medium
- red hat satelliteA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....CVE-2020-14334Fix available8.8 High
- isaacs node-tar, tar, red hat confidential compute attestation +40 more +42 morenode-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path SanitizationCVE-2026-23745Public exploitFix available8.2 High
- red hat satellite 6, red hat satellite 6 hat satellite 6, redhat satellite +2 moreVersions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token...CVE-2014-35906.5 Medium
- redhat satellite, red hat satellite 6, satellite proxy v 5.6 +2 moreRhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satelliteCVE-2012-5562Fix available8.6 High
- kpdecker jsdiff, red hat satellite 6 +1 morejsdiff has a Denial of Service vulnerability in parsePatch and applyPatchCVE-2026-24001Fix available2.7 Low
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 morefast-uri vulnerable to host confusion via percent-encoded authority delimitersCVE-2026-6322Fix available7.5 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +32 more +34 morefast-uri vulnerable to path traversal via percent-encoded dot segmentsCVE-2026-6321Fix available7.5 High
- red hat satelliteIt was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to...CVE-2017-75135.4 Medium
- [unknown] satelliteRed Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering...CVE-2017-121753.5 Low
- red hat satelliteA cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red...CVE-2017-7514Fix available4.3 Medium
- [unknown] satelliteA cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite...CVE-2017-7538Fix available3.5 Low
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821Fix available9.6 Critical
- red hat enterprise linux 6, enterprise linux 7, network proxy v 5.4 +3 more +5 moreSpacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messagesCVE-2012-0059Fix available4.9 Medium
- redhat spacewalk, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreSpacewalk: spacewalk: cross-site scripting via uri in lookup login/password formCVE-2011-33445.4 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search formsCVE-2011-29275.4 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.CVE-2011-29205.5 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameterCVE-2011-15946.5 Medium
- redhat satellite, red hat network satellite server v 5.3, network satellite server v 5.4 +2 more +4 moreRed hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypassCVE-2013-2056Fix available7.5 High
- redhat satellite, red hat network satellite server v 5.4, satellite 6 +2 moreSatellite: xss in custom system information key handlingCVE-2011-4346Fix available4.6 Medium
- redhat spacewalk-java, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreSpacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgeryCVE-2009-4139Fix available6.8 Medium
- openssl, red hat enterprise linux 10, enterprise linux 3 +11 more +13 moreOpenssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypassCVE-2006-4339Fix available9.1 Critical