Medium 4.6

Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite...

CVE-2011-4346 First seen on SecPulse Dec 11, 2011

Original description The description as published by the source.

Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 4.6; CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Published: May 13, 2022
First seen on SecPulse: Dec 11, 2011
GHSA: GHSA-cx23-4vj7-xjv6
CWE: CWE-79

NVD GitHub Advisory

Tags(click for explanation)

Attack Types

Cross-Site Scripting

CWE

CWE-79

Vendors

Red Hat

All

Red Hat Network Satellite Server V 54 Red Hat Satellite 6 Redhat Satellite Enterprise Linux

Detection sources

NIST National Vulnerability DatabaseOct 31, 04:17
GitHub Security Advisories (Global)Oct 31, 06:32
CVE.org (CVE Program・cvelistV5)Oct 31, 03:03