CVE-2016-3080

Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via the (1) RHNMD User or (2) Filesystem parameters, related to display of monitoring probes.

• CWE-79

• http://rhn.redhat.com/errata/RHSA-2016-1484.htmlVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1320942Issue Tracking, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-1484.htmlVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1320942Issue Tracking, Vendor Advisory

Published

Aug 5, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3074Integer signedness error in GD Graphics Library 2.1.1 (aka l…9.8
• CVE-2016-3075Stack-based buffer overflow in the nss_dns implementation of…
• CVE-2016-3076Heap-based buffer overflow in the j2k_encode_entry function …
• CVE-2016-3077The VersionMapper.fromKernelVersionString method in oVirt En…
• CVE-2016-3078Multiple integer overflows in php_zip.c in the zip extension…9.8
• CVE-2016-3079Multiple cross-site scripting (XSS) vulnerabilities in the W…
• CVE-2016-3081Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.…
• CVE-2016-3082XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x be…
• CVE-2016-3083Apache Hive (JDBC + HiveServer2) implements SSL for plain TC…
• CVE-2016-3084The UAA reset password flow in Cloud Foundry release v236 an…
• CVE-2016-3085Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1…
• CVE-2016-3086The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and…