CVE-2007-5961

Published May 23, 2008

Last updated 2 years ago

Overview

Description: Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Source: secalert@redhat.com
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.3
Impact score: 2.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-79

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:redhat:network_satellite:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F7B591BB-5B16-4252-968C-8BE929857E08",
            "versionEndIncluding": "5.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References