CVE-2016-3097

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-08-05 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via a group name, related to viewing snapshot data.

Affected products

Red Hat Satellite 6: 5.7

References

http://rhn.redhat.com/errata/RHSA-2016-1484.html
https://bugzilla.redhat.com/show_bug.cgi?id=1322747
http://rhn.redhat.com/errata/RHSA-2016-1484.html
https://bugzilla.redhat.com/show_bug.cgi?id=1322747

Get alerted when CVE-2016-3097 or the next vulnerability affects your stack