Known vulnerabilities in satellite (Red Hat package) - page 5

Software CPE: cpe:2.3:o:red_hat:satellite_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 92
Public exploits: 6
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting satellite (Red Hat package) satellite (Red Hat package) is affected by 92 known vulnerabilities: 12 high, 60 medium, 20 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78931 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-0118
CWE-78 Low
No
No
6.11.5.6-1.el7sat, 6.11.5.6-1.el8sat, 6.12.5.2-1.el8sat, 6.13.3-1.el8sat 03.08.2023 SB2023080359
SB2023080360
SB2023102351
and 2 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946
CWE-276 Low
No
No
6.12.3-1.el8sat 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU68860 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31163
CWE-22 Medium
No
No
6.11.4-2.el7sat, 6.11.4-2.el8sat 31.10.2022 SB2022103147
SB2022103161
SB2022072942
and 6 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889
CWE-94 High
Available
Exploited
6.12.1-1.el8sat 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU65868 - Deserialization of Untrusted Data
CVE-2022-32224
CWE-502 Medium
No
No
6.12.1-1.el8sat 28.07.2022 SB2022072836
SB2023011881
SB2023050806
and 2 more
#VU64862 - Improper input validation
CVE-2022-30122
CWE-20 Medium
No
No
6.11.4-2.el7sat, 6.11.4-2.el8sat 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 8 more
#VU62794 - Unprotected Transport of Credentials
CVE-2021-27023
CWE-523 Medium
No
No
6.10.5-1.el7sat 04.05.2022 SB2022050414
SB2022050430
SB2022060135
and 5 more
#VU62793 - Resource Management Errors
CVE-2021-27025
CWE-399 Low
No
No
6.10.5-1.el7sat 04.05.2022 SB2022050414
SB2022050430
SB2022060135
and 5 more
#VU61798 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24790
CWE-444 Medium
No
No
6.9.10-1.el7sat 01.04.2022 SB2022040112
SB2022052603
SB2022092241
and 12 more
#VU61248 - Improper Authentication
CVE-2021-4142
CWE-287 Medium
No
No
6.10.3-1.el7sat 10.03.2022 SB2022031037
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290
CWE-312 Low
No
No
6.10.2-1.el7sat 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086
CWE-693 Low
No
No
6.5.3.2-1.el7sat 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more


Showing elements 81 - 100 out of 92