CVE-2011-2920 MEDIUM

CVE-2011-2920: Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.

Vendor Red Hat
Product Red Hat Enterprise Linux 6
Weakness CWE-79 · XSS
Published February 5, 2014
Last update April 2, 2026
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.

Key dates

02Disclosure timeline

February 5, 2014 CVE published
April 2, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-23605 WordPress Call To Action Popup plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-1276 Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-6092 comfyanonymous comfyui Incomplete Fix CVE-2024-10099 image cross site scripting CVE-2024-47090 XSS via WYSIWYG editor CVE-2023-43658 Improper escaping of user input in discourse-calendar