CVE-2014-3595
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Red Hat Satellite（RHN Satellite，红帽网络卫星）是美国红帽（Red Hat）公司的一套系统管理平台。Spacewalk是基于红帽网络卫星而开发的一套开源Linux系统管理解决方案。 Spacewalk和RHN Satellite 5.4版本至5.6版本中的spacewalk-java中存在跨站脚本漏洞。远程攻击者可通过发送特制的请求利用该漏洞注入任意Web脚本或HTML。以下版本受到影响：spacewalk-java 1.2.39版本，1.7.54版本和2.0.2版本。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2014-3595
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat Network Satellite和Spacewalk 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat Satellite（RHN Satellite，红帽网络卫星）是美国红帽（Red Hat）公司的一套系统管理平台。Spacewalk是基于红帽网络卫星而开发的一套开源Linux系统管理解决方案。 Spacewalk和RHN Satellite 5.4版本至5.6版本中的spacewalk-java中存在跨站脚本漏洞。远程攻击者可通过发送特制的请求利用该漏洞注入任意Web脚本或HTML。以下版本受到影响：spacewalk-java 1.2.39版本，1.7.54版本和2.0.2版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2014-3595
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-3595
请登录查看更多情报信息。
Vendor Advisories for CVE-2014-3595 (3)
Mailing List Discussions for CVE-2014-3595 (2)
-
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00031.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00009.html vendor-advisory x_refsource_SUSE
Same Patch Batch · n/a · 2014-09-22 · 62 CVEs total
| CVE-2014-6019 | Android psychology应用程序加密问题漏洞 | |
| CVE-2014-7153 | WordPress Huge-IT Image Gallery插件SQL注入漏洞 | |
| CVE-2014-3635 | Red Hat D-Bus 差一错误漏洞 | |
| CVE-2014-0484 | Debian acpi-support package 提权漏洞 | |
| CVE-2012-5700 | Schlix Web Baby Gekko 跨站脚本漏洞 | |
| CVE-2014-6636 | Android LG Telepresence应用程序加密问题漏洞 | |
| CVE-2014-6023 | Android s-peek credit rating report应用程序加密问题漏洞 | |
| CVE-2014-6022 | Android Versent Books应用程序加密问题漏洞 | |
| CVE-2014-6021 | Android Harley-Davidson Visa应用程序加密问题漏洞 | |
| CVE-2014-6020 | Android Fuel Rewards Network应用程序加密问题漏洞 | |
| CVE-2014-6637 | Android Facebook Facts应用程序加密问题漏洞 | |
| CVE-2014-6018 | Android global beauty research应用程序加密问题漏洞 | |
| CVE-2014-6017 | Android Doodle Drop应用程序加密问题漏洞 | |
| CVE-2014-6016 | Android Celluloid应用程序加密问题漏洞 | |
| CVE-2014-6015 | Android TuCarro应用程序加密问题漏洞 | |
| CVE-2014-6014 | Android Conquest Of Fantasia应用程序加密问题漏洞 | |
| CVE-2014-6013 | Android nuSquare应用程序加密问题漏洞 | |
| CVE-2014-6012 | Android Gravity Bounce应用程序加密问题漏洞 | |
| CVE-2014-6011 | Android cutprice应用程序加密问题漏洞 | |
| CVE-2014-6010 | Android Rasta Weed Widgets HD应用程序加密问题漏洞 |
Showing top 20 of 62 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2014-3595
No comments yet