CVE-2007-5961

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2007-5961
Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://osvdb.org/45765
http://www.redhat.com/support/errata/RHSA-2008-0261.html
http://www.securitytracker.com/id?1020051
https://bugzilla.redhat.com/show_bug.cgi?id=396641
https://exchange.xforce.ibmcloud.com/vulnerabilities/42559
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:network_satellite:*:*:*:*:*:*:*:*
History

13 Feb 2023, 02:18

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2008:0261', 'name': 'https://access.redhat.com/errata/RHSA-2008:0261', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2007-5961', 'name': 'https://access.redhat.com/security/cve/CVE-2007-5961', 'tags': [], 'refsource': 'MISC'}
Summary CVE-2007-5961 RHN XSS flaw Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

02 Feb 2023, 15:15

Type Values Removed Values Added
Summary Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web script or HTML via unknown vectors. CVE-2007-5961 RHN XSS flaw
References
  • (MISC) https://access.redhat.com/errata/RHSA-2008:0261 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2007-5961 -
Information

Published : 2008-05-23 15:32

Updated : 2023-12-10 10:51

NVD link : CVE-2007-5961

Mitre link : CVE-2007-5961

CVE.ORG link : CVE-2007-5961

JSON object : View

Products Affected

redhat

  • network_satellite
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')