Red Hat

Records7413All Threatist records

Exploited (KEV)98In CISA KEV

CVSS critical792CVSS 9.0–10.0

CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CRITICAL 86KEV 2026-09-02 TI-2015-02874 Red Hat Libuser Race Condition Vulnerability CRITICAL 92KEV 2026-08-26 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records

Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

10 records in Network Satellite · all components

TI-2013-01912 CVE-2013-2143 · GHSA-rhwm-66gm-6j9v

The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not…

MEDIUM 59

The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by setting a user account…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.48221 Published 2014-04-17 Will not fix CWE-20

TI-2014-06777 CVE-2014-8162 · GHSA-r4x8-hgr8-2fhj

XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN)…

LOW 38

XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vecto…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02674 Published 2015-05-14 Fixed

TI-2013-03929 CVE-2013-4480 · GHSA-6g3j-mch3-9577

Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to…

LOW 37

Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02076 Published 2013-11-15 Fixed CWE-668

TI-2011-01413 CVE-2011-1594 · GHSA-v4fr-cg8r-vwm7

Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter

LOW 32

A flaw was found in Spacewalk, as used in Red Hat Network Satellite.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01456 Published 2014-02-05 Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-601

TI-2011-02573 CVE-2011-2920 · GHSA-pqp9-2cmp-fx98

Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.

LOW 29

A flaw was found in Spacewalk and Red Hat Network Satellite.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.0204 Published 2014-02-05 Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-79

TI-2011-02954 CVE-2011-3344 · GHSA-fvhw-hg3x-xxxp

Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form

LOW 28

A flaw was found in Spacewalk.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01539 Published 2014-02-05 Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-79

TI-2011-02579 CVE-2011-2927 · GHSA-2738-x33m-p89q

Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms

LOW 27

A flaw was found in Spacewalk and Red Hat Network Satellite.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01468 Published 2014-02-05 Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-79

TI-2011-02572 CVE-2011-2919 · GHSA-7vjr-395v-c89g

Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network…

LOW 22

Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01188 Published 2014-02-05 Fixed CWE-79

TI-2007-05700 CVE-2007-5961 · GHSA-m54g-mfm4-wp3f

Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature…

LOW 22

Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web script or HTML via unknow…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01083 Published 2008-05-23 Fixed CWE-79

TI-2014-06485 CVE-2014-7811 · GHSA-mqgf-q94x-fm6r

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network…

LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST A…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01463 Published 2015-01-15 Fixed CWE-79

Open these records in search →

Critical	792
High	2681
Medium	3429
Low	509
No CVSS	2