Login Request a demo
SA
Product
Satellite
by Redhat · last CVE Oct 1, 2026
On CISA KEVExploited in the wild
241
CVEs
4
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities241In the news2Timeline
Severity mix
Critical 31High 64Medium 107Low 23
Severity
All severities241Critical31High64Medium107Low23
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Satellite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-5233
4.2
1%
Apr 11
Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read…
Affected: 6.1
CVE-2017-10295
4.0
2%
Oct 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
Affected: 5.8
CVE-2019-2992
3.7
3%
Oct 16
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)
Affected: 5.8
CVE-2019-2988
3.7
3%
Oct 16
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)
Affected: 5.8
CVE-2019-2983
3.7
4%
Oct 16
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)
Affected: 5.8
CVE-2019-2981
3.7
4%
Oct 16
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)
Affected: 5.8
CVE-2019-2978
3.7
3%
Oct 16
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)
Affected: 5.8
CVE-2019-2973
3.7
4%
Oct 16
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)
Affected: 5.8
CVE-2019-2964
3.7
4%
Oct 16
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)
Affected: 5.8
CVE-2019-2962
3.7
4%
Oct 16
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)
Affected: 5.8
CVE-2018-2952
3.7
4%
Jul 18
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency)
Affected: 5.6; 5.7; 5.8
CVE-2018-2579
3.7
4%
Jan 18
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries)
Affected: 5.6; 5.7; 5.8
CVE-2017-3544
3.7
2%
Apr 24
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
Affected: 5.8
CVE-2017-3533
3.7
3%
Apr 24
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
Affected: 5.8
CVE-2015-2808
3.7
74%
Apr 1
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for…
Affected: 5.7; 5.6
CVE-2019-2786
3.4
3%
Jul 23
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security)
Affected: 5.8
CVE-2018-3136
3.4
5%
Oct 17
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security)
Affected: 5.6; 5.7; 5.8
CVE-2019-2945
3.1
3%
Oct 16
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)
Affected: 5.8
CVE-2019-2422
3.1
3%
Jan 16
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries)
Affected: 5.8
CVE-2019-2449
3.1
3%
Jan 16
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment)
Affected: 5.8
CVE-2018-3139
3.1
5%
Oct 17
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking)
Affected: 5.6; 5.7; 5.8
CVE-2018-2790
3.1
5%
Apr 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security)
Affected: 5.6; 5.7; 5.8
CVE-2017-10345
3.1
2%
Oct 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 5.8
CVE-2017-3539
3.1
2%
Apr 24
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security)
Affected: 5.8
CVE-2017-15136
2.7
1%
Feb 27
When registering and activating a new system with Red Hat Satellite 6 if the new systems hostname is then reset to the hostname of a previously registered system the previously…
Affected: 6.0
CVE-2015-5006
–
0%
Dec 7
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow…
Affected: 5.6; 5.7
CVE-2015-8126
–
10%
Nov 13
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x…
Affected: 5.7; 5.6
CVE-2014-7812
–
1%
Jan 15
Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via…
Affected: 5.6
CVE-2014-3654
–
2%
Nov 3
Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary…
Affected: 5.5; 5.6
CVE-2014-3595
–
2%
Sep 22
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to…
Affected: 5.4; 5.5; 5.6
CVE-2010-2236
–
3%
Apr 15
The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote…
Affected: 4.0; 4.1; 4.2; 5.1; 5.2; 5.3
CVE-2013-1869
–
2%
Apr 1
CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP…
Affected: 5.6
CVE-2013-4415
–
2%
Feb 14
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1)…
Affected: 5.6
CVE-2013-1871
–
2%
Feb 14
Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary web script or…
Affected: 5.6
CVE-2012-6149
–
2%
Feb 14
Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web…
Affected: 5.6
CVE-2013-4480
–
2%
Nov 18
Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator…
Affected: through 5.6
CVE-2013-2056
–
2%
Jul 31
The Inter-Satellite Sync (ISS) operation in Red Hat Network (RHN) Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to…
Affected: 5.3; 5.4; 5.5
CVE-2012-1145
–
3%
Jun 16
spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is…
Affected: 5.4
CVE-2011-4346
–
2%
Dec 10
Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via…
Affected: 5.4.1
CVE-2010-1171
–
3%
Apr 18
Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of…
Affected: 5.3; 5.4
CVE-2007-1349
–
10%
Mar 30
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote…
Affected: 5.1
Page 5 of 5 · 241 total
1…45