SP
Product
Spacewalk
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 5Low 0
Watch
Add Spacewalk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1693 | 9.8 | Feb 17 | A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint Affected: before 2.9 |
| CVE-2019-10137 | 9.8 | Jul 2 | A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens Affected: through 2.9 |
| CVE-2017-7470 | 9.8 | Jul 27 | It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in… Affected: All versions, or not specified |
Showing 3