Satellite vulnerabilities | LiveThreat CVE Feed

Product

Satellite

by Redhat · last CVE Oct 1, 2026

On CISA KEVExploited in the wild

241

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities241 In the news2 Timeline

Severity mix

Critical 31High 64Medium 107Low 23

Severity

All severities241 Critical31 High64 Medium107 Low23

Exploitation

On CISA KEV4 Exploited in the wild4

Watch

Add Satellite to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-12175	5.4	1%	Jul 26	Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocomplete functionality Affected: before 6.5
CVE-2017-7538	5.4	1%	Jul 26	A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8 Affected: before 5.8
CVE-2015-0284	5.4	1%	Apr 14	Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via… Affected: 5.7
CVE-2021-20256	5.3	0%	Feb 23	A flaw was found in Red Hat Satellite Affected: 6.0
CVE-2020-10693	5.3	2%	May 6	A flaw was found in Hibernate Validator version 6.1.2.Final Affected: 6.8
CVE-2019-2769	5.3	4%	Jul 23	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities) Affected: 5.8
CVE-2019-2762	5.3	4%	Jul 23	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities) Affected: 5.8
CVE-2019-7317	5.3	9%	Feb 4	png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: 5.8
CVE-2018-3214	5.3	7%	Oct 17	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound) Affected: 5.6; 5.7; 5.8
CVE-2018-2799	5.3	15%	Apr 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP) Affected: 5.6; 5.7; 5.8
CVE-2018-2798	5.3	7%	Apr 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT) Affected: 5.6; 5.7; 5.8
CVE-2018-2797	5.3	7%	Apr 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX) Affected: 5.6; 5.7; 5.8
CVE-2018-2796	5.3	7%	Apr 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency) Affected: 5.6; 5.7; 5.8
CVE-2018-2795	5.3	7%	Apr 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 5.6; 5.7; 5.8
CVE-2018-2657	5.3	8%	Jan 18	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 5.6; 5.7; 5.8
CVE-2018-2629	5.3	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS) Affected: 5.6; 5.7; 5.8
CVE-2018-2603	5.3	7%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: 5.6; 5.7; 5.8
CVE-2017-10357	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: 5.8
CVE-2017-10355	5.3	16%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 5.8
CVE-2017-10350	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: 5.8
CVE-2017-10349	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 5.8
CVE-2017-10348	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 5.8
CVE-2017-10347	5.3	3%	Oct 19	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 5.8
CVE-2017-10281	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 5.8
CVE-2017-10109	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 5.8
CVE-2017-10108	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 5.8
CVE-2017-10053	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D) Affected: 5.8
CVE-2019-3893	4.9	2%	Apr 9	In Foreman it was discovered that the delete compute resource operation, when executed from the Foreman API, leads to the disclosure of the plaintext password or token for the… Affected: 6.0
CVE-2012-0059	4.9	2%	Feb 5	A flaw was found in Spacewalk-backend Affected: 5.4
CVE-2024-4812	4.8	0%	Jun 5	A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user Affected: 6.0
CVE-2019-2975	4.8	3%	Oct 16	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: 5.8
CVE-2019-2816	4.8	2%	Jul 23	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking) Affected: 5.8
CVE-2018-2599	4.8	4%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: 5.6; 5.7; 5.8
CVE-2019-2999	4.7	3%	Oct 16	Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc) Affected: 5.8
CVE-2018-2581	4.7	3%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 5.6; 5.7; 5.8
CVE-2022-4130	4.5	1%	Dec 16	A blind site-to-site request forgery vulnerability was found in Satellite server Affected: 6.9; 6.10; 6.11
CVE-2018-2602	4.5	1%	Jan 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n) Affected: 5.6; 5.7; 5.8
CVE-2026-13316	4.4	0%	Jun 30	Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config Affected: 6.0 through 6.19
CVE-2023-4886	4.4	0%	Oct 3	A sensitive information exposure vulnerability was found in foreman Affected: 6.0
CVE-2018-5382	4.4	0%	Apr 16	The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore Affected: 6.4
CVE-2026-5138	4.3	0%	Jul 1	Foreman: foreman: information disclosure via improper validation of nested request parameters Affected: 6.16 before 6.16.10; 6.17 before 6.17.9; 6.18 before 6.18.7; 6.19 before 6.19.2
CVE-2019-10136	4.3	1%	Jul 2	It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums Affected: 5.8
CVE-2018-2940	4.3	3%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 5.6; 5.7; 5.8
CVE-2018-2678	4.3	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: 5.6; 5.7; 5.8
CVE-2018-2677	4.3	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT) Affected: 5.6; 5.7; 5.8
CVE-2018-2663	4.3	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: 5.6; 5.7; 5.8
CVE-2018-2588	4.3	3%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP) Affected: 5.6; 5.7; 5.8
CVE-2017-10105	4.3	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 5.8
CVE-2019-2996	4.2	2%	Oct 16	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment) Affected: 5.8
CVE-2018-2800	4.2	5%	Apr 19	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI) Affected: 5.6; 5.7; 5.8