VulnerabilityModified
CVE-2007-5961
Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
MEDIUM 4.3EPSS 1.08%
Does this matter?
Lower severity and a low EPSS score (1.08%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.08% probability · 63th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- redhat/network satellite
- Source
- secalert@redhat.com
References
- http://osvdb.org/45765
- http://www.redhat.com/support/errata/RHSA-2008-0261.html
- http://www.securitytracker.com/id?1020051
- https://bugzilla.redhat.com/show_bug.cgi?id=396641
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42559
- http://osvdb.org/45765
- http://www.redhat.com/support/errata/RHSA-2008-0261.html
- http://www.securitytracker.com/id?1020051
- https://bugzilla.redhat.com/show_bug.cgi?id=396641
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42559
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.