CVE-2011-2927: Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-05 · updated 2026-06-16
Weakness: CWE-79

Description

A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HTML into web pages viewed by other users. The flaw is triggered through vectors related to Search forms, enabling attackers to potentially steal sensitive information or perform actions on behalf of the victim.

Affected products

RedHat Network Satellite: all versions
spacewalkproject spacewalk: 1.6

References

http://www.redhat.com/support/errata/RHSA-2011-1299.html
https://access.redhat.com/security/cve/CVE-2011-2927
https://bugzilla.redhat.com/show_bug.cgi?id=730955
https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html
http://www.redhat.com/support/errata/RHSA-2011-1299.html
https://bugzilla.redhat.com/show_bug.cgi?id=730955
https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html

Get alerted when CVE-2011-2927 or the next vulnerability affects your stack