Login Request a demo
SP
Product
Spacewalk
by Redhat · last CVE Feb 17, 2020
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 3High 1Medium 5Low 0
Severity
All severities12Critical3High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Spacewalk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-1693
9.8
4%
Feb 17
A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint
Affected: before 2.9
CVE-2019-10137
9.8
3%
Jul 2
A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens
Affected: through 2.9
CVE-2017-7470
9.8
2%
Jul 27
It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in…
Affected: All versions, or not specified
CVE-2018-1077
7.5
1%
Mar 14
Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server
Affected: 2.6
CVE-2011-1594
6.5
1%
Feb 5
A flaw was found in Spacewalk, as used in Red Hat Network Satellite
Affected: 1.6
CVE-2011-2920
5.5
2%
Feb 5
A flaw was found in Spacewalk and Red Hat Network Satellite
Affected: 1.6
CVE-2011-3344
5.4
1%
Feb 5
A flaw was found in Spacewalk
Affected: 1.6
CVE-2011-2927
5.4
1%
Feb 5
A flaw was found in Spacewalk and Red Hat Network Satellite
Affected: 1.6
CVE-2019-10136
4.3
1%
Jul 2
It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums
Affected: through 2.9
CVE-2014-7812
–
1%
Jan 15
Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via…
Affected: All versions, or not specified
CVE-2014-7811
–
1%
Jan 15
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script…
Affected: All versions, or not specified
CVE-2011-2919
–
1%
Feb 5
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the…
Affected: 1.6
Showing 12