[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8EcMZLEgG8Bbc_NTJS5FPz6mXIsW90eZnb0cSVxZmtI":3,"g5a-ex:redhat\u002Fsatellite_capsule@*":121,"g5a-family:redhat\u002Fsatellite_capsule":123},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":35,"kevVulnerabilities":98,"seoMetadata":99,"meta":118},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"redhat","satellite_capsule",5,13,0,"2021-05-27",[14,18,21,24,26],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"6.3",3,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"6.4",7,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"6.6",1,{"version":25,"cve_count":23,"kev_count":11,"has_kev":17},"6.7",{"version":27,"cve_count":23,"kev_count":11,"has_kev":17},"6.8","Satellite Capsule by Redhat is a technology product with 5 tracked versions and 13 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33,34],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":23,"kev_count":11,"has_kev":17},{"version":27,"cve_count":23,"kev_count":11,"has_kev":17},[36,44,49,56,63,69,74,81,87,92],{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":43},"CVE-2017-15095","A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.","2018-02-06",9.8,"v3.1","Critical",0.08357,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":48},"CVE-2017-5929","QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.","2017-03-13",0.07501,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":41,"severity":54,"isKev":17,"epssScore":55},"CVE-2018-1000632","dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.","2018-08-20",7.5,"High",0.0657,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":41,"severity":61,"isKev":17,"epssScore":62},"CVE-2018-10237","Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.","2018-04-26",5.9,"Medium",0.05086,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":41,"severity":61,"isKev":17,"epssScore":68},"CVE-2020-10693","A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.","2020-05-06",5.3,0.02351,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":53,"cvssVersion":41,"severity":54,"isKev":17,"epssScore":73},"CVE-2016-1000338","In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.","2018-06-01",0.01794,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":79,"severity":61,"isKev":17,"epssScore":80},"CVE-2016-8639","It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.","2018-08-01",5.4,"v3.0",0.0116,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":41,"severity":61,"isKev":17,"epssScore":86},"CVE-2017-15100","An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts page, when clicking on the \"chart\" button and hovering over the chart; (2) Trends page, when checking the graph for a trend based on a such fact; (3) Statistics page, for facts that are aggregated on this page.","2017-11-27",6.1,0.011,{"cveId":88,"description":89,"publishedDate":12,"cvssScore":90,"cvssVersion":41,"severity":61,"isKev":17,"epssScore":91},"CVE-2020-10716","A flaw was found in Red Hat Satellite's Job Invocation, where the \"User Input\" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.",6.5,0.00768,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":41,"severity":54,"isKev":17,"epssScore":97},"CVE-2017-2667","Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.","2018-03-12",8.1,0.00692,[],{"title":100,"metaDescription":101,"keywords":102,"structuredData":103},"Satellite Capsule by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Satellite Capsule by Redhat covering 5 versions with 13 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Satellite Capsule vulnerabilities, Satellite Capsule security, Satellite Capsule CVE, Redhat Satellite Capsule, Satellite Capsule threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":104,"@type":105,"name":106,"description":101,"url":107,"manufacturer":108,"applicationCategory":112,"softwareVersion":113,"mainEntity":114},"https:\u002F\u002Fschema.org","SoftwareApplication","Satellite Capsule","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fsatellite_capsule",{"@type":109,"name":110,"url":111},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","5 versions tracked",{"@type":115,"name":116,"description":117,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Satellite Capsule Security Vulnerabilities","Security vulnerabilities affecting Satellite Capsule by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":119,"apiVersion":120},"2026-10-17T16:48:32.583Z","3.0",{"rows":122,"total":11,"capped":17,"failed":11},[],[]]