Skip to content
Sign in
4.3 Medium

CVE-2017-7514 A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before…

Description

A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.

Affected products and versions

Product Affected versions Fixed in
Red Hat Satellite 5.8.0 No fix stated

Other CVEs of Red Hat Satellite

The 2 CVEs of Red Hat Satellite →
CVE-2017-7513 It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509… 5.4 Medium
Track this CVE