Medium severity5.4NVD Advisory· Published Feb 5, 2014· Updated Jun 16, 2026

CVE-2011-2927

Description

A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HTML into web pages viewed by other users. The flaw is triggered through vectors related to Search forms, enabling attackers to potentially steal sensitive information or perform actions on behalf of the victim.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Satellite
cpe:2.3:a:redhat:network_satellite:-:*:*:*:*:*:*:*
Red Hat/Spacewalk2 versions
cpe:2.3:a:redhat:spacewalk:1.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:spacewalk:1.6:*:*:*:*:*:*:*
- (no CPE)
Red Hat/Red Hat Network (RHN) Satellitellm-fuzzy

Patches

Vulnerability mechanics

References

www.redhat.com/support/errata/RHSA-2011-1299.htmlnvdPatchVendor Advisory
bugzilla.redhat.com/show_bug.cginvdVendor Advisory
www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.htmlnvdVendor Advisory
access.redhat.com/security/cve/CVE-2011-2927nvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000