Login Request a demo
SA
Product
Satellite
by Redhat · last CVE Oct 1, 2026
On CISA KEVExploited in the wild
241
CVEs
4
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities241In the news2Timeline
Severity mix
Critical 31High 64Medium 107Low 23
Severity
All severities241Critical31High64Medium107Low23
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Satellite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2013-2101
5.4
1%
Dec 3
Katello has multiple XSS issues in various entities
Affected: 6.0
CVE-2018-16887
5.4
1%
Jan 13
A cross-site scripting (XSS) flaw was found in the katello component of Satellite
Affected: 6.0
CVE-2017-7513
5.4
0%
Aug 22
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields
Affected: 5.0; 5.1.1; 5.2; 5.3; 5.4; 5.4.1; +4 more
CVE-2016-8639
5.4
1%
Aug 1
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name
Affected: 6.3
CVE-2017-7514
5.4
1%
Jul 30
A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0
Affected: before 5.8.0
CVE-2017-12175
5.4
1%
Jul 26
Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocomplete functionality
Affected: before 6.5
CVE-2017-7538
5.4
1%
Jul 26
A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8
Affected: before 5.8
CVE-2015-0284
5.4
1%
Apr 14
Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via…
Affected: 5.7
CVE-2021-20256
5.3
0%
Feb 23
A flaw was found in Red Hat Satellite
Affected: 6.0
CVE-2020-10693
5.3
2%
May 6
A flaw was found in Hibernate Validator version 6.1.2.Final
Affected: 6.8
CVE-2019-2769
5.3
4%
Jul 23
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities)
Affected: 5.8
CVE-2019-2762
5.3
4%
Jul 23
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities)
Affected: 5.8
CVE-2019-7317
5.3
9%
Feb 4
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute
Affected: 5.8
CVE-2018-3214
5.3
7%
Oct 17
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound)
Affected: 5.6; 5.7; 5.8
CVE-2018-2799
5.3
15%
Apr 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP)
Affected: 5.6; 5.7; 5.8
CVE-2018-2798
5.3
7%
Apr 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT)
Affected: 5.6; 5.7; 5.8
CVE-2018-2797
5.3
7%
Apr 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX)
Affected: 5.6; 5.7; 5.8
CVE-2018-2796
5.3
7%
Apr 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency)
Affected: 5.6; 5.7; 5.8
CVE-2018-2795
5.3
7%
Apr 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
Affected: 5.6; 5.7; 5.8
CVE-2018-2657
5.3
8%
Jan 18
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 5.6; 5.7; 5.8
CVE-2018-2629
5.3
5%
Jan 18
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS)
Affected: 5.6; 5.7; 5.8
CVE-2018-2603
5.3
7%
Jan 18
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries)
Affected: 5.6; 5.7; 5.8
CVE-2017-10357
5.3
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization)
Affected: 5.8
CVE-2017-10355
5.3
16%
Oct 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
Affected: 5.8
CVE-2017-10350
5.3
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS)
Affected: 5.8
CVE-2017-10349
5.3
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)
Affected: 5.8
CVE-2017-10348
5.3
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 5.8
CVE-2017-10347
5.3
3%
Oct 19
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 5.8
CVE-2017-10281
5.3
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 5.8
CVE-2017-10109
5.3
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 5.8
CVE-2017-10108
5.3
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 5.8
CVE-2017-10053
5.3
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D)
Affected: 5.8
CVE-2019-3893
4.9
2%
Apr 9
In Foreman it was discovered that the delete compute resource operation, when executed from the Foreman API, leads to the disclosure of the plaintext password or token for the…
Affected: 6.0
CVE-2012-0059
4.9
2%
Feb 5
A flaw was found in Spacewalk-backend
Affected: 5.4
CVE-2024-4812
4.8
0%
Jun 5
A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user
Affected: 6.0
CVE-2019-2975
4.8
3%
Oct 16
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting)
Affected: 5.8
CVE-2019-2816
4.8
2%
Jul 23
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking)
Affected: 5.8
CVE-2018-2599
4.8
4%
Jan 18
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)
Affected: 5.6; 5.7; 5.8
CVE-2019-2999
4.7
3%
Oct 16
Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc)
Affected: 5.8
CVE-2018-2581
4.7
3%
Jan 18
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX)
Affected: 5.6; 5.7; 5.8
CVE-2022-4130
4.5
1%
Dec 16
A blind site-to-site request forgery vulnerability was found in Satellite server
Affected: 6.9; 6.10; 6.11
CVE-2018-2602
4.5
1%
Jan 18
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n)
Affected: 5.6; 5.7; 5.8
CVE-2026-13316
4.4
0%
Jun 30
Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config
Affected: 6.0 through 6.19
CVE-2023-4886
4.4
0%
Oct 3
A sensitive information exposure vulnerability was found in foreman
Affected: 6.0
CVE-2018-5382
4.4
0%
Apr 16
The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore
Affected: 6.4
CVE-2026-5138
4.3
0%
Jul 1
Foreman: foreman: information disclosure via improper validation of nested request parameters
Affected: 6.16 before 6.16.10; 6.17 before 6.17.9; 6.18 before 6.18.7; 6.19 before 6.19.2
CVE-2019-10136
4.3
1%
Jul 2
It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums
Affected: 5.8
CVE-2018-2940
4.3
3%
Jul 18
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 5.6; 5.7; 5.8
CVE-2018-2678
4.3
5%
Jan 18
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)
Affected: 5.6; 5.7; 5.8
CVE-2018-2677
4.3
5%
Jan 18
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT)
Affected: 5.6; 5.7; 5.8
Page 2 of 3 · 107 total
123