CVE-2016-3097: Red Hat Satellite

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via a group name, related to viewing snapshot data.

Affected products

• Red Hat Satellite: version 5.7 only

Published 2016-08-05. Last modified 2026-06-17.