CVE-2017-7514

MEDIUM

Red Hat Satellite < 5.8.0 - Stored Cross-Site Scripting via Failed Action Entry

Title source: llm
STIX 2.1

Description

A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:1558
Issue Tracking, Vendor Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7514

Scores

CVSS v3 4.3
EPSS 0.0064
EPSS Percentile 46.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
redhat/satellite < 5.8.0
Published Jul 30, 2018
Tracked Since Feb 18, 2026