Katello vulnerabilities

4 published CVEs name Katello among the affected products.

Critical 0High 1Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2014-0183
Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the systems name when registering.
Katello · Katello
Medium6.1
CVE-2013-4120
Katello has a Denial of Service vulnerability in API OAuth authentication
Katello · Katello
High7.5
CVE-2013-0283
Katello: Username in Notification page has cross site scripting
Katello · Katello
Medium5.4
CVE-2013-2101
Katello has multiple XSS issues in various entities
Katello · Katello
Medium5.4