Unscored severity · published Jan 15, 2015
CVE-2014-7811
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Manager · Suse
1.7 · source: NVD
NS
Network Satellite · Redhat
through 5.6 · source: NVD
SP
Spacewalk · Redhat
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-7811
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-7811
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-0033.html
secunia.com
http://secunia.com/advisories/62183
More from Network Satellite
6.5
CVE-2011-1594
A flaw was found in Spacewalk, as used in Red Hat Network Satellite
5.5
CVE-2011-2920
A flaw was found in Spacewalk and Red Hat Network Satellite
5.4
CVE-2011-3344
A flaw was found in Spacewalk
5.4
CVE-2011-2927
A flaw was found in Spacewalk and Red Hat Network Satellite
–
CVE-2014-8162
XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have…