suse · CVE-2014-7812

Quick triage

Priority: medium Published: 2021-05-30 13:23:18 UTC Updated: 2026-04-18 18:34:41 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2014-7812 severity moderate: SUSE including 357 source package names (amazon/suse-sles-15-sp1-chost-byos-v20210304-hvm-ssd-x86_64, amazon/suse-sles-15-sp1-chost-byos-v20220127-hvm-ssd-x86_64, …), 368 product×package rows across 7 product lines (SUSE Manager 1.7, SUSE Manager 2.1, … (7 product lines)): Known Affected 231, Fixed 121, Known Not Affected 16.

Description:

Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field.

cvelogic Threat Intelligence