Search/CVE-2014-3654
● CVE

CVE-2014-3654

Vendorredhat, suseProductsatellite, manager, manager server, satellite with embedded oracle, spacewalk-javaDiscoveredNov 3, 2014UpdatedMay 6, 2026

Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do.

View graph Watch Export
CVSS v3.1
—
EPSS
1.76%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
6 relationships
Timeline
disclosure → media coverage
Nov 3, 2014
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026