VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 22, 2014· Updated Jun 17, 2026

CVE-2014-3595

CVE-2014-3595

Description

Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • Red Hat/Satellite3 versions
    cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*
  • Red Hat/Satellite With Embedded Oracle2 versions
    cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.5:*:*:*:*:*:*:*
  • Red Hat/Spacewalk Java3 versions
    cpe:2.3:a:redhat:spacewalk-java:1.2.39:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:redhat:spacewalk-java:1.2.39:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:spacewalk-java:1.7.54:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:spacewalk-java:2.0.2:*:*:*:*:*:*:*
  • SUSE S.A./Manager2 versions
    cpe:2.3:a:suse:manager:1.7:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:suse:manager:1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:suse:manager_server:-:*:*:*:*:*:*:*
  • Red Hat/Red Hat Network (RHN) Satellitellm-fuzzy
    Range: >=5.4, <=5.6
  • Spacewalkproject/Spacewalkllm-fuzzy
    Range: 1.2.39, 1.7.54, 2.0.2

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.