CVE-2014-7812

EPSS 0.21%
Veröffentlicht 15.01.2015 15:59:02
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Satellite Version5.6

Redhat ≫ Spacewalk Version-

Suse ≫ Manager Version1.7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.405

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html

http://rhn.redhat.com/errata/RHSA-2015-0033.html

Vendor Advisory

http://secunia.com/advisories/62183

https://nvd.nist.gov/vuln/detail/CVE-2014-7812

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-7812

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-7812

EUVD