CVE:CVE-2014-3595
CNNVD:CNNVD-201409-829
Red Hat Satellite（RHN Satellite，红帽网络卫星）是美国红帽（Red Hat）公司的一套系统管理平台。Spacewalk是基于红帽网络卫星而开发的一套开源Linux系统管理解决方案。
Spacewalk和RHN Satellite 5.4版本至5.6版本中的spacewalk-java中存在跨站脚本漏洞。远程攻击者可通过发送特制的请求利用该漏洞注入任意Web脚本或HTML。以下版本受到影响：spacewalk-java 1.2.39版本，1.7.54版本和2.0.2版本。
solution:Upgrade redhat satellite to a higher version than 5.4,5.5,5.6,and avoid the version 5.4,5.5,5.6; Upgrade redhat satellite_with_embedded_oracle to a higher version than 5.4,5.5,and avoid the version 5.4,5.5; Upgrade redhat spacewalk-java to a higher version than 1.2.39,1.7.54,2.0.2,and avoid the version 1.2.39,1.7.54,2.0.2; Upgrade suse manager to a higher version than 1.7,and avoid the version 1.7; Upgrade suse manager_server to a higher version than -