Redhat Spacewalk vulnerabilities

• red hat spacewalk A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity... CVE-2020-1693 8.6 HighFebruary 17, 2020
• red hat spacewalk, redhat satellite +1 more It was found that Spacewalk, all versions through 2.8, did not safely compute client token... CVE-2019-10136 Fix available 4.3 MediumJuly 2, 2019
• redhat spacewalk, spacewalkproject spacewalk-proxy, redhat satellite +2 more A path traversal flaw was found in spacewalk-proxy, all versions through 2.8, in the way the... CVE-2019-10137 Fix available 8.1 HighJuly 2, 2019
• red hat spacewalk, redhat satellite +1 more Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially... CVE-2018-1077 7.5 HighMarch 14, 2018
• redhat spacewalk, [unknown] spacewalk-backend, redhat satellite +2 more It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform... CVE-2017-7470 Fix available 6.5 MediumMay 18, 2017
• redhat satellite, spacewalk-java +1 more Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat... CVE-2016-3079 6.1 MediumApril 14, 2016
• redhat satellite, spacewalk-java +1 more Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7... CVE-2015-0284 5.4 MediumApril 14, 2016
• redhat satellite, spacewalk-java, satellite with embedded oracle +2 more +4 more Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red... CVE-2014-3654 Fix available 4.3 MediumNovember 3, 2014
• redhat satellite, spacewalk, suse manager +2 more Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before... CVE-2014-7812 3.5 LowSeptember 29, 2014
• redhat spacewalk, network satellite, suse manager +2 more Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN)... CVE-2014-7811 3.5 LowSeptember 29, 2014
• redhat satellite, spacewalk-java, satellite with embedded oracle +2 more +4 more Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk... CVE-2014-3595 Fix available 4.3 MediumSeptember 22, 2014
• redhat satellite, spacewalk-java, network proxy +2 more The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN)... CVE-2010-2236 6.0 MediumApril 15, 2014
• redhat satellite, spacewalk-java +1 more CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN)... CVE-2013-1869 4.3 MediumApril 1, 2014
• redhat satellite, satellite 5 managed db, spacewalk-java +2 more +4 more Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN)... CVE-2013-4415 4.3 MediumFebruary 14, 2014
• redhat satellite, satellite 5 managed db, spacewalk-java +2 more Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red... CVE-2012-6149 3.5 LowFebruary 14, 2014
• redhat spacewalk, red hat enterprise linux 6, enterprise linux 7 +2 more +4 more Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form CVE-2011-3344 5.4 MediumFebruary 5, 2014
• redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 more Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms CVE-2011-2927 5.4 MediumFebruary 5, 2014
• redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 more Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution. CVE-2011-2920 5.5 MediumFebruary 5, 2014
• redhat spacewalk, network satellite +1 more Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN)... CVE-2011-2919 4.3 MediumFebruary 5, 2014
• redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 more Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter CVE-2011-1594 6.5 MediumFebruary 5, 2014
• redhat spacewalk-java, red hat enterprise linux 6, enterprise linux 7 +2 more +4 more Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery CVE-2009-4139 Fix available 6.8 MediumJuly 27, 2011