CVE-2007-5961: Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and...

Security readout for executives and security teams

CVE-2007-5961 is a cross-site scripting issue in the Red Hat Network channel search feature. A remote attacker could inject script or HTML. The public bundle identifies RHN and Red Hat Network Satellite before 5.0.2, but gives no CVSS score, CWE, detailed vector, or active-exploitation evidence. Exposure is most likely where legacy RHN or Red Hat Network Satellite versions earlier than 5.0.2 remain deployed. The bundle does not identify broader affected products or CPEs, so inventory confirmation is required before assuming risk. Treat as a legacy-platform risk. It is not currently KEV-listed in the provided bundle, but XSS in management software can expose administrator sessions or trusted workflows. Prioritize confirmation and remediation if RHN or old Satellite remains in service. Mitigation focus: Inventory RHN and Red Hat Network Satellite deployments and confirm version numbers.; Prioritize upgrades for Red Hat Network Satellite versions earlier than 5.0.2.; Review Red Hat advisory RHSA-2008:0261 for vendor-specific fixed packages and instructions..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.