CVE-2012-6149: Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Netwo...

Security readout for executives and security teams

This is a stored cross-site scripting issue in legacy Spacewalk and Red Hat Network Satellite 5.6. A remote attacker could place script or HTML into note subject or content fields, causing unsafe content to appear in the notes page. Business impact depends on whether these management systems still exist and who can reach them. Exposure is most likely in organizations still running Spacewalk or Red Hat Network Satellite 5.6. Internet exposure is not established by the sources; risk rises if management interfaces or XML-RPC access are reachable by untrusted users. Prioritize this if legacy Spacewalk or RHN Satellite remains in service, especially in infrastructure management environments. For retired or isolated systems, urgency is lower, but inventory confirmation is important because unsupported management platforms often carry accumulated risk. Mitigation focus: Inventory legacy Spacewalk and Red Hat Network Satellite 5.6 deployments.; Review and apply applicable vendor guidance from RHSA-2014:0148 and SUSE-SU-2014:0222.; Confirm whether referenced Spacewalk fixes are included in deployed packages..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.