תיאור (מקור, אנגלית)
Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.
מוצרים מושפעים
redhat: satellite; redhat: enterprise linux
קישורים10
- www.redhat.com/support/errata/RHSA-2011-1794.html PatchVendor Advisory
- www.redhat.com/support/errata/RHSA-2011-1794.html PatchVendor Advisory
- secunia.com/advisories/47162 Broken Link
- www.securityfocus.com/bid/50963 Third Party AdvisoryVDB Entry
- www.securitytracker.com/id?1026391 Third Party AdvisoryVDB Entry
- access.redhat.com/errata/RHSA-2011:1794
- access.redhat.com/security/cve/CVE-2011-4346
- bugzilla.redhat.com/show_bug.cgi?id=742050 Issue Tracking
- secunia.com/advisories/47162 Broken Link
- www.securityfocus.com/bid/50963 Third Party AdvisoryVDB Entry
מדדים
- CVSS 3.1
-
4.6
MEDIUM
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N - EPSS — סבירות ניצול
- 1% אחוזון 69 · נכון ל-2 בנובמבר 2026
- CWE
- CWE-79