CVE-2011-4346

Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.

• CWE-79

• http://secunia.com/advisories/47162Broken Link
• http://www.redhat.com/support/errata/RHSA-2011-1794.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/50963Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1026391Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=742050Issue Tracking
• http://secunia.com/advisories/47162Broken Link
• http://www.redhat.com/support/errata/RHSA-2011-1794.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/50963Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1026391Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=742050Issue Tracking

Published

Dec 10, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4340Multiple cross-site scripting (XSS) vulnerabilities in Symph…
• CVE-2011-4341Multiple SQL injection vulnerabilities in symphony/content/c…
• CVE-2011-4342PHP remote file inclusion vulnerability in wp_xml_export.php…
• CVE-2011-4343Information disclosure vulnerability in Apache MyFaces Core …
• CVE-2011-4344Cross-site scripting (XSS) vulnerability in Jenkins Core in …
• CVE-2011-4345Cross-site scripting (XSS) vulnerability in Namazu before 2.…
• CVE-2011-4347The kvm_vm_ioctl_assign_device function in virt/kvm/assigned…
• CVE-2011-4348Race condition in the sctp_rcv function in net/sctp/input.c …
• CVE-2011-4349Multiple SQL injection vulnerabilities in (1) cd-mapping-db.…
• CVE-2011-4350Yaws 1.91 has a directory traversal vulnerability in the way…6.5
• CVE-2011-4351Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, …
• CVE-2011-4352Integer overflow in the vp3_dequant function in the VP3 deco…