Red Hat Spacewalk-Java vulnerabilities

9 CVEs affecting Red Hat Spacewalk-Java, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-3079, published 2016-04-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-2236, published 2014-04-15. Medium severity, CVSS 6.0. EPSS: 3.1% chance of exploitation in the next 30 days. The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users…
CVE-2013-1869, published 2014-04-01. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting…
CVE-2014-3654, published 2014-11-03. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML…
CVE-2014-3595, published 2014-09-22. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web…
CVE-2013-4415, published 2014-02-14. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria…
CVE-2016-3079, published 2016-04-14. Medium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to…
CVE-2012-6149, published 2014-02-14. Low severity, CVSS 3.5. EPSS: 1.6% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the…
CVE-2015-0284, published 2016-04-14. Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the…
CVE-2009-4139, published 2011-07-27. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to…