CVE-2013-1871

LOW 3.5CVE-2013-1871 · Published 14/02/2014 · updated 16/06/2026

In short

CVE-2013-1871 is a LOW (CVSS 3.5) vulnerability affecting satellite (redhat).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
satellite redhat	`= 5.6`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter.

References

osvdb.org/103211
rhn.redhat.com/errata/RHSA-2014-0148.html · Vendor Advisory
secunia.com/advisories/56952
bugzilla.redhat.com/show_bug.cgi · Patch
git.fedorahosted.org/cgit/spacewalk.git/commit
suse.com/support/update/announcement/2014/suse-su-20140222-1.html

More vulnerabilities in satellite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

satellite

redhat

= 5.6

No fix yet

More vulnerabilities in satellite

See all →