CVE-2014-3654 | BDVDB-2026-65967 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/60976
http://secunia.com/advisories/62027
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00010.html
http://rhn.redhat.com/errata/RHSA-2014-1762.html

Exploit#

No public exploit known

History#

Version 12014-11-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.