VYPR

Satellite

by Red Hat

Source repositories

CVEs (256)

  • CVE-2019-2981LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2019-2978LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2019-2973LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2019-2964LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2019-2962LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2018-2952LowJul 18, 2018
    Sun Corporation
    Java SE
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability…

  • CVE-2016-9593MedApr 16, 2018
    Theforeman
    Foreman
    risk 0.24cvss 4.7epss 0.01

    foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems.

  • CVE-2018-2579LowJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows…

  • CVE-2017-3544LowApr 24, 2017
    Google
    Android
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows…

  • CVE-2017-3533LowApr 24, 2017
    Oracle Corporation
    Jrockit
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows…

  • CVE-2017-12175LowJul 26, 2018
    Red Hat
    Satellite
    risk 0.23cvss 3.5epss 0.01

    Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocomplete functionality.

  • CVE-2017-7538LowJul 26, 2018
    Red Hat
    Satellite
    risk 0.23cvss 3.5epss 0.01

    A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8. A user able to change an organization's name could exploit this flaw to perform XSS attacks against other Satellite users.

  • CVE-2019-2786LowJul 23, 2019
    Microfocus
    Xp7 Command View
    risk 0.22cvss 3.4epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2018-3136LowOct 17, 2018
    Microfocus
    Xp7 Command View
    risk 0.22cvss 3.4epss 0.04

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2026-5138MedJul 1, 2026
    Theforeman
    Foreman
    risk 0.21cvss 4.3epss 0.00

    A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope controller method does not properly validate organization and location IDs from nested…

  • CVE-2026-12515MedJun 17, 2026
    Katello Project
    Katello
    risk 0.21cvss 4.3epss 0.00

    A flaw was found in Katello's of Red Hat Satellite. A content upload functionality where insufficient authorization checks in the ContentUploadsController allowed users with the edit_products permission to query content information for repositories outside the products they were…

  • CVE-2025-2157LowMar 15, 2025
    Theforeman
    Foreman
    risk 0.21cvss 3.3epss 0.00

    A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS users to monitor and access temporary files under /var/tmp, exposing sensitive command outputs, such as /etc/shadow. This issue can lead to information disclosure and privilege…

  • CVE-2018-3139LowOct 17, 2018
    Microfocus
    Xp7 Command View
    risk 0.21cvss 3.1epss 0.05

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2018-2790LowApr 19, 2018
    Sun Corporation
    Java SE
    risk 0.21cvss 3.1epss 0.05

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2019-2945LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.20cvss 3.1epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with…

Page 11 of 13