Red Hat

Records7414All Threatist records

Exploited (KEV)98In CISA KEV

CVSS critical793CVSS 9.0–10.0

CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CRITICAL 86KEV 2026-09-02 TI-2015-02874 Red Hat Libuser Race Condition Vulnerability CRITICAL 92KEV 2026-08-26 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records

Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

12 records in Spacewalk · all components

TI-2020-01640 CVE-2020-1693 · GHSA-79v3-cg9r-f55q

XML external entity injection in Red Hat spacewalk

MEDIUM 49

A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04268 Published 2020-02-17 Will not fix CWE-611

TI-2019-07460 CVE-2019-10137 · GHSA-38jq-w3g8-jpc9

Path traversal in spacewalkproject spacewalk-proxy

MEDIUM 48

A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03121 Published 2019-07-02 Fixed CWE-22

TI-2017-05117 CVE-2017-7470 · GHSA-8hhp-cr56-3gg7

Incorrect authorization in [UNKNOWN] spacewalk-backend

MEDIUM 46

It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02118 Published 2018-07-27 Fixed CWE-863

TI-2018-00996 CVE-2018-1077 · GHSA-c447-rp4f-fgvj

XML external entity injection in spacewalk

LOW 35

Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01043 Published 2018-03-14 Will not fix CWE-611

TI-2011-01413 CVE-2011-1594 · GHSA-v4fr-cg8r-vwm7

Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter

LOW 32

A flaw was found in Spacewalk, as used in Red Hat Network Satellite.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01456 Published 2014-02-05 Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-601

TI-2011-02573 CVE-2011-2920 · GHSA-pqp9-2cmp-fx98

Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.

LOW 29

A flaw was found in Spacewalk and Red Hat Network Satellite.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.0204 Published 2014-02-05 Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-79

TI-2011-02954 CVE-2011-3344 · GHSA-fvhw-hg3x-xxxp

Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form

LOW 28

A flaw was found in Spacewalk.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01539 Published 2014-02-05 Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-79

TI-2011-02579 CVE-2011-2927 · GHSA-2738-x33m-p89q

Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms

LOW 27

A flaw was found in Spacewalk and Red Hat Network Satellite.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01468 Published 2014-02-05 Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-79

TI-2011-02572 CVE-2011-2919 · GHSA-7vjr-395v-c89g

Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network…

LOW 22

Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01188 Published 2014-02-05 Fixed CWE-79

TI-2019-07459 CVE-2019-10136 · GHSA-w2m4-8m7f-6vwv

Improper signature verification in spacewalkproject spacewalk

LOW 21

It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00565 Published 2019-07-02 Fixed CWE-347

TI-2014-06486 CVE-2014-7812 · GHSA-ggpg-v628-g33j

Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite…

LOW 20

Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01463 Published 2015-01-15 Fixed CWE-79

TI-2014-06485 CVE-2014-7811 · GHSA-mqgf-q94x-fm6r

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network…

LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST A…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01463 Published 2015-01-15 Fixed CWE-79

Open these records in search →

Critical	793
High	2681
Medium	3429
Low	509
No CVSS	2