CVE-2011-4346 in Network Satellite

摘要

由 MITRE

Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 预定: 2011-11-04
• 披露: 2011-12-10
• 管理: 已接受
• 条目: VDB-59647
• CPE: 准备好
• CWE: CWE-79 (已确认)
• CVSS: 3.5 (NVD)
• EPSS: 0.01686
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-4346
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-4346
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-4346/