CVE-2016-2103: Red Hat Satellite

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the list_1680466951_oldfilterval parameter to systems/PhysicalList.do or (2) unspecified vectors involving systems/VirtualSystemsList.do.

Affected products

• Red Hat Satellite: version 5.7 only

Published 2016-04-14. Last modified 2026-06-17.