CVE-2016-3079

Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script…

published April 14, 2016

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to systems/SystemEntitlements.do; (2) the label parameter to admin/multiorg/EntitlementDetails.do; or the name of a (3) snapshot tag or (4) system group in System Set Manager (SSM).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01578 · 75.1th percentile
Published
2016-04-14T14:00Z
EPSS history
Timeline
  • 14 APR 14:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script…
    cvelistv5