CVE-2016-2103 in Satellite

Resumen (Inglés)

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the list_1680466951_oldfilterval parameter to systems/PhysicalList.do or (2) unspecified vectors involving systems/VirtualSystemsList.do.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2016-01-29

Divulgación

2016-04-14

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
82396	Red Hat Satellite PhysicalList.do secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2016-2103

Fuentes

• MITRE
• NVD
• CVE Details