Subscription Asset Manager (Redhat) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2020-02-19. Vendor: Redhat.
CVEs of Subscription Asset Manager
- CVE-2012-6685 - CVSS 7.5 (high), 2020-02-19: Nokogiri before 1.5.4 is vulnerable to XXE attacks
- CVE-2014-0183 - CVSS 6.1 (medium), 2020-01-02: Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the systems name when registering.
- CVE-2014-0026 - CVSS 6.5 (medium), 2019-12-11: katello-headpin is vulnerable to CSRF in REST API
- CVE-2013-6460 - CVSS 6.5 (medium), 2019-11-05: Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
- CVE-2013-6461 - CVSS 6.5 (medium), 2019-11-05: Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
- CVE-2015-7501 - CVSS 9.8 (critical), 2017-11-09: Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform…
- CVE-2014-0029 - CVSS 6.1 (medium), 2017-10-16: Multiple cross-site scripting (XSS) vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web…
- CVE-2014-0130 - CVSS 7.5 (high), 2014-05-07: Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x…
- CVE-2013-6439 - CVSS 9.3 (critical), 2013-12-23: Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which…
- CVE-2013-1823 - CVSS 4.3 (medium), 2013-04-02: Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject…
- CVE-2012-6119 - CVSS 2.1 (low), 2013-04-02: Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to…
