CVE-2007-5496: Selinux Setroubleshoot

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert.

Affected products

• Selinux Setroubleshoot: version 2.0.5 only

Published 2008-05-23. Last modified 2026-06-16.