Skip to contentRedhat Satellite vulnerabilities
- red hat satelliteA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....CVE-2020-14334Fix available8.8 High
- redhat hibernate validator, hibernate hibernate-validator, ibm websphere application server +5 more +7 moreImproper Input Validation in Hibernate ValidatorCVE-2020-10693Fix available5.3 Medium
- red hat satellite 6, red hat satellite 6 hat satellite 6, redhat satellite +2 moreVersions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token...CVE-2014-35906.5 Medium
- redhat satellite, rubygem-hammer cli foreman cli foreman, theforeman hammer cli +2 morerubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readableCVE-2014-02415.5 Medium
- katello, redhat satellite +1 moreKatello has multiple XSS issues in various entitiesCVE-2013-21015.4 Medium
- redhat satellite, red hat satellite 6, satellite proxy v 5.6 +2 moreRhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satelliteCVE-2012-5562Fix available8.6 High
- nokogiri, ruby nokogiri gem, debian linux +5 more +7 moreNokogiri vulnerable to DoS while parsing XML entitiesCVE-2013-6461Fix available6.5 Medium
- nokogiri, ruby nokogiri gem, debian linux +5 more +7 moreNokogiri vulnerable to DoS while parsing XML documentsCVE-2013-6460Fix available6.5 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +5 more +7 moreFrom Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or...CVE-2019-176319.1 Critical
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions...CVE-2019-2999Fix available4.7 Medium
- oracle corporation java, netapp e-series santricity os controller, e-series santricity storage manager +12 more +14 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment)....CVE-2019-29964.2 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2992Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2988Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2019-2983Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)....CVE-2019-2981Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2019-2978Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +16 more +18 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting)....CVE-2019-2975Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)....CVE-2019-2973Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)...CVE-2019-2964Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2962Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2019-2945Fix available3.1 Low
- redhat satellite, the foreman foreman +1 moreIt was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce...CVE-2014-81837.4 High
- the foreman project foreman-tasks, redhat satellite +1 moreAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...CVE-2019-101986.5 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreAll builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to...CVE-2019-117757.4 High
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2816Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, hp xp7 command view +9 more +11 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2786Fix available3.4 Low
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2769Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2762Fix available5.3 Medium
- red hat spacewalk, redhat satellite +1 moreIt was found that Spacewalk, all versions through 2.8, did not safely compute client token...CVE-2019-10136Fix available4.3 Medium
- redhat spacewalk, spacewalkproject spacewalk-proxy, redhat satellite +2 moreA path traversal flaw was found in spacewalk-proxy, all versions through 2.8, in the way the...CVE-2019-10137Fix available8.1 High
- apache qpid, apache software foundation qpid proton, redhat enterprise linux desktop +8 more +10 moreWithdrawn Advisory: Improper Certificate Validation in Apache Qpid ProtonCVE-2019-0223Fix available7.4 High
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...CVE-2019-2698Public exploitFix availableEPSS 12.0%8.1 High
- oracle corporation java, canonical ubuntu linux, hp xp7 command view +8 more +10 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...CVE-2019-2697Public exploitFix availableEPSS 11.5%8.1 High
- oracle corporation java, apache cassandra, tomcat +15 more +17 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2019-2684Fix availableEPSS 37.6%5.9 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2602Fix available7.5 High
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +4 more +6 moreIn Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...CVE-2019-102457.5 High
- red hat candlepin, redhat satellite +1 moreIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...CVE-2019-38915.5 Medium
- redhat satellite, red hat qpid-dispatch-router +1 moreA lack of access control was found in the message queues maintained by Satellite's QPID broker...CVE-2019-3845Fix available8.0 High
- the foreman foreman, redhat satellite +1 moreIn Foreman it was discovered that the delete compute resource operation, when executed from the...CVE-2019-38934.9 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on...CVE-2018-125499.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native...CVE-2018-125479.8 Critical
- libpng, canonical ubuntu linux, debian linux +29 more +31 morepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...CVE-2019-7317Fix available5.3 Medium
- [unknown] satelliteAn improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can...CVE-2018-146666.8 Medium
- oracle corporation java, netapp oncommand unified manager, oncommand workflow automation +9 more +11 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The...CVE-2019-24493.1 Low
- oracle corporation java, canonical ubuntu linux, debian linux +16 more +18 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported...CVE-2019-2422Fix available3.1 Low
- red hat katello, redhat satellite +1 morekatello Cross-site Scripting vulnerabilityCVE-2018-16887Fix available5.4 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3214Fix available5.3 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3183Fix available9.0 Critical
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3180Fix available5.6 Medium
- canonical ubuntu linux, debian linux, hp xp7 command view +10 more +12 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2018-3169Fix available8.3 High
- Show moreLoading…