CVE-2014-7811: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7811?
CVE-2014-7811 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2014-7811?
To fix CVE-2014-7811, upgrade to safe versions of Red Hat Satellite or Red Hat Spacewalk as specified in the vendor's advisory.
Who is affected by CVE-2014-7811?
CVE-2014-7811 affects users of Red Hat Satellite versions up to 5.6, Red Hat Spacewalk, and SUSE Manager version 1.7.
What type of vulnerability is CVE-2014-7811?
CVE-2014-7811 is categorized as a cross-site scripting (XSS) vulnerability.
Can remote authenticated users exploit CVE-2014-7811?
Yes, remote authenticated users can exploit CVE-2014-7811 by injecting arbitrary web scripts or HTML via the REST API.