Known vulnerabilities in spacewalk-java
Vendor:
Spacewalk Project
Software:
spacewalk-java
Software CPE:
cpe:2.3:a:spacewalkproject:spacewalk-java:*:*:*:*:*:*:*:*
Website:
https://github.com/spacewalkproject
Total vulnerabilities:
3
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU138957 - Authorization Bypass Through User-Controlled Key CVE-2026-63007 |
CWE-639 | Medium | 4.3.92-0, 5.1.28-0, 5.2.19-0 | 21.07.2026 |
SB20260721143 |
||
| #VU138956 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-63009 |
CWE-22 | Medium | 4.3.92-0, 5.1.28-0, 5.2.19-0 | 21.07.2026 |
SB20260721143 |
||
| #VU107608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-23392 |
CWE-79 | Low | - | 18.04.2025 |
SB2025041814 SB2025041823 SB2025041824 |