Orta CVSS 5.4
CVE-2011-3344: Network Satellite: siteler arası betik çalıştırma (XSS)
Açıklama (NVD)
A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's browser session.
Özet bilgiler
- Ürün
- Redhat Network Satellite
- CVSS v3.1
- 5.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - EPSS
- %1,54 (yüzdelik 75)
- CWE
- CWE-79
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-network-satellite | — | — | — |
| redhat-spacewalk | 1.6 | 1.6 | — |