Skip to content
Redhat Subscription Asset Manager vulnerabilities
-
katello, redhat subscription asset manager +1 more
Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a...
CVE-2014-0183
6.1 Medium
-
katello-headpin, redhat subscription asset manager +1 more
katello-headpin is vulnerable to CSRF in REST API
CVE-2014-0026
6.5 Medium
-
nokogiri, ruby nokogiri gem, debian linux +5 more +7 more
Nokogiri vulnerable to DoS while parsing XML entities
CVE-2013-6461
Fix available
6.5 Medium
-
nokogiri, ruby nokogiri gem, debian linux +5 more +7 more
Nokogiri vulnerable to DoS while parsing XML documents
CVE-2013-6460
Fix available
6.5 Medium
-
redhat subscription asset manager
Multiple cross-site scripting (XSS) vulnerabilities in the SAM web application in Red Hat katello...
CVE-2014-0029
6.1 Medium
-
redhat data grid, jboss a-mq, openshift +12 more +14 more
Deserialization of Untrusted Data in Apache commons collections
CVE-2015-7501
Known exploitedPublic exploitFix available
EPSS 85.6%
9.8 Critical
-
nokogiri, redhat cloudforms management engine, enterprise mrg +5 more +7 more
Nokogiri is vulnerable to XML External Entity (XXE) attack
CVE-2012-6685
Fix available
7.5 High
-
rails ruby on rails, rubyonrails rails, redhat enterprise linux server +1 more +3 more
actionpack Path Traversal vulnerability
CVE-2014-0130
In KEVPublic exploitFix available
EPSS 53.7%
7.5 High
-
redhat subscription asset manager
Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme...
CVE-2013-6439
9.3 High
-
redhat subscription asset manager
Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset...
CVE-2013-1823
4.3 Medium
-
candlepinproject candlepin, redhat subscription asset manager +1 more
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not...
CVE-2012-6119
2.1 Low