CVE-2011-2927CWE-79

Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms

Medium · published February 5, 2014

CVSS v3.1
5.4
EPSS
1%
Percentile
73.4
In the wild
Unconfirmed
What it is

A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HTML into web pages viewed by other users. The flaw is triggered through vectors related to Search forms, enabling attackers to potentially steal sensitive information or perform actions on behalf of the victim.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01468 · 73.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2014-02-05T18:00Z
EPSS history
Timeline
  • 05 FEB 18:00Z
    Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms
    cvelistv5