Product by Red Hat

    Katello

    11 known vulnerabilities in Katello (Red Hat), 1 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Katello (Red Hat)
    CriticalCVE-2014-0130

    Ruby on Rails Directory Traversal Vulnerability

    In CISA KEValso in 2 other products

    		7.5
    CriticalCVE-2015-7501

    Red Hat Data Grid: security vulnerability

    also in 13 other products

    		9.8
    HighCVE-2012-6685

    Nokogiri: XML External Entity (XXE)

    also in 6 other products

    		7.5
    MediumCVE-2013-6461

    Ruby Nokogiri gem: security vulnerability

    also in 7 other products

    		6.5
    MediumCVE-2013-6460

    Ruby Nokogiri gem: Infinite Loop

    also in 7 other products

    		6.5
    MediumCVE-2014-0029

    Red Hat Subscription Asset Manager: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2014-0183

    Katello: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    Not ratedCVE-2013-1823

    Red Hat Subscription Asset Manager: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2013-6439

    Red Hat Subscription Asset Manager: security vulnerability

    		—
    MediumCVE-2014-0026

    Katello-headpin: Cross-Site Request Forgery (CSRF)

    		6.5
    Not ratedCVE-2012-6119

    Candlepinproject Candlepin: security vulnerability

    also in 1 other product

    		—

    All products by Red Hat