CVE-2016-2104 — Cross-site Scripting in Redhat Satellite

CWE-79 — Cross-site Scripting5 documents5 sources
Severity
6.1MEDIUMNVD
EPSS
0.3%
top 46.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Redhat Satellite
Timeline
PublishedApr 13
Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the label parameter to admin/BunchDetail.do; (2) the package_name, (3) search_subscribed_channels, or (4) channel_filter parameter to software/packages/NameOverview.do; or unspecified vectors related to (5) or (6) tags.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-ch75-g728-9c8j: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the l↗2022-05-17
▶
CVEList
CVE-2016-2104: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the l↗2017-04-13
▶

📋Vendor Advisories

1
Red Hat
5: stored and reflected XSS vulnerabilities↗2016-02-24
▶

💬Community

1
Bugzilla
CVE-2016-2104 Satellite 5: stored and reflected XSS vulnerabilities↗2016-02-08
▶
CVE-2016-2104 — Cross-site Scripting in Redhat | cvebase