A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.
CVE-2011-2920
CVSS base score
5.5 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-79
Last modified
October 30, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Affected products
redhat network satellite
redhat spacewalk
References
- www.redhat.com Patch, Vendor Advisory
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com Vendor Advisory
- www.redhat.com Vendor Advisory
- www.redhat.com Patch, Vendor Advisory
- bugzilla.redhat.com Vendor Advisory
- www.redhat.com Vendor Advisory