VDB
CVE-2017-7514
CVE-2017-7514
PUBLISHED
CVSS 4.300000190734863 MEDIUM
A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.
EPSS 0.64% · 50.6th percentile
Risk Scores
CVSS 3.0
4.300000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS Score
0.64%
50.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| redhat | satellite | 0 |
| Red Hat | Red Hat Satellite | 5.8.0 |
Timeline
- Nov 9, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 24, 2021 EPSS Score
- Aug 26, 2021 EPSS Score
- Oct 29, 2021 EPSS Score
- Dec 31, 2021 EPSS Score
- Mar 5, 2022 EPSS Score
- May 8, 2022 EPSS Score
- Jul 10, 2022 EPSS Score
- Sep 13, 2022 EPSS Score
- Nov 15, 2022 EPSS Score
- Jan 18, 2023 EPSS Score