Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.
CVE-2011-4346
CVSS base score
4.6 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-79
Last modified
October 30, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Affected products
redhat satellite
References
- secunia.com Broken Link
- www.redhat.com Patch, Vendor Advisory
- www.securityfocus.com Third Party Advisory, VDB Entry
- www.securitytracker.com Third Party Advisory, VDB Entry
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com Issue Tracking
- secunia.com Broken Link
- www.redhat.com Patch, Vendor Advisory
- www.securityfocus.com Third Party Advisory, VDB Entry