Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.
Historical advisory recorded 30 Oct 2026 19:45:26 UTC. Read the latest advisory.
cve-program · CVE-2011-2920
PublishedA flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2011-2920
PublishedSpacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.
A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.
- Source published
- 5 Feb 2014 18:00:00 UTC
- Source modified
- 30 Oct 2026 18:03:22 UTC
- Saved here
- 30 Oct 2026 19:45:26 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 3.1 · 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L