CVE-2011-4346

MediumCVSS 4.6

Published: 10/12/2011(UTC)Updated: 30/10/2026(UTC)Translated: 30/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.24%

69th percentile - higher than 69% of all known CVEs

Summary

Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.

Risk Assessment

An attacker can execute malicious script in other users' browsers, potentially hijacking sessions or stealing data. The risk affects RHN Satellite users.

Recommendation

Update Red Hat Network Satellite to a version containing the fix. Implement input validation and sanitization mechanisms.

Other vulnerabilities in Red Hat Network Satellite

CVE-2013-2056High
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS