VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Sep 22, 2014· Updated May 6, 2026

CVE-2014-3595

CVE-2014-3595

Description

Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.

Affected products

10
  • Red Hat/Satellite3 versions
    cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*
  • Red Hat/Satellite With Embedded Oracle2 versions
    cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.5:*:*:*:*:*:*:*
  • Red Hat/Spacewalk Java3 versions
    cpe:2.3:a:redhat:spacewalk-java:1.2.39:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:redhat:spacewalk-java:1.2.39:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:spacewalk-java:1.7.54:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:spacewalk-java:2.0.2:*:*:*:*:*:*:*
  • SUSE S.A./Manager
    cpe:2.3:a:suse:manager:1.7:*:*:*:*:*:*:*
  • SUSE S.A./Manager Server
    cpe:2.3:a:suse:manager_server:-:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.