CVE-2016-2104

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the label parameter to admin/BunchDetail.do; (2) the package_name, (3) search_subscribed_channels, or (4) channel_filter parameter to software/packages/NameOverview.do; or unspecified vectors related to (5) <input:hidden> or (6) <bean:message> tags.

• CWE-79

• http://rhn.redhat.com/errata/RHSA-2016-0590.htmlVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1305677Issue Tracking, Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1313515Issue Tracking, Third Party Advisory, VDB Entry
• http://rhn.redhat.com/errata/RHSA-2016-0590.htmlVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1305677Issue Tracking, Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1313515Issue Tracking, Third Party Advisory, VDB Entry

Published

Apr 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2098Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1…
• CVE-2016-2099Use-after-free vulnerability in validators/DTD/DTDScanner.cp…
• CVE-2016-2100Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow rem…
• CVE-2016-2101Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2102HAProxy statistics in openstack-tripleo-image-elements are n…
• CVE-2016-2103Multiple cross-site scripting (XSS) vulnerabilities in Red H…
• CVE-2016-2105Integer overflow in the EVP_EncodeUpdate function in crypto/…7.5
• CVE-2016-2106Integer overflow in the EVP_EncryptUpdate function in crypto…
• CVE-2016-2107The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2…5.9
• CVE-2016-2108The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 …
• CVE-2016-2109The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in …
• CVE-2016-2110The NTLMSSP authentication implementation in Samba 3.x and 4…