Vulnerabilities of Red Hat Red Hat Satellite 6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-10622	A flaw was found in Red Hat Satellite (Foreman component)	8.0 High	Nov 5, 2025
CVE-2025-3931	Yggdrasil: local privilege escalation in yggdrasil	7.8 High	May 14, 2025
CVE-2025-4574	Crossbeam-channel: crossbeam-channel vulnerable to double free on drop	6.5 Medium	May 13, 2025
CVE-2025-4432	Ring: some aes functions may panic when overflow checking is enabled in ring	5.3 Medium	May 9, 2025
CVE-2025-2157	A flaw was found in Foreman/Red Hat Satellite	3.3 Low	Mar 15, 2025
CVE-2024-11831	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	5.4 Medium	Feb 10, 2025
CVE-2023-1932	A flaw was found in hibernate-validator's 'isValid' method in the…	6.1 Medium	Nov 7, 2024
CVE-2024-6861	A disclosure of sensitive information flaw was found in foreman via the GraphQL API	7.5 High	Nov 6, 2024
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Medium	Oct 1, 2024
CVE-2024-7700	A command injection flaw was found in the "Host Init Config" template in the Foreman application via the "Install…	6.5 Medium	Aug 12, 2024
CVE-2024-7143	A flaw was found in the Pulp package	6.7 Medium	Aug 7, 2024
CVE-2024-4812	A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the…	4.8 Medium	Jun 5, 2024
CVE-2024-3716	A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter	6.2 Medium	Jun 5, 2024
CVE-2023-50782	A flaw was found in the python-cryptography package	7.5 High	Feb 5, 2024
CVE-2023-1832	An improper access control flaw was found in Candlepin	6.8 Medium	Oct 4, 2023
CVE-2022-3874	A command injection flaw was found in foreman	8.0 High	Sep 22, 2023
CVE-2023-0462	An arbitrary code execution flaw was found in Foreman	8.0 High	Sep 20, 2023
CVE-2012-5562	A flaw was found in rhn-proxy	8.6 High	Dec 2, 2019
CVE-2013-2056	A flaw was found in Red Hat Network Satellite	7.5 High	Jul 31, 2013
CVE-2011-4346	Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote…	4.6 Medium	Dec 10, 2011

Other Red Hat products