title: Red Hat Security Advisory: spacewalk-java, spacewalk-web and satellite-branding security update
description: (spacewalk-java): XSS in system.addNote XML-RPC call due improper sanitization of note's subject and content Satellite/Spacewalk: header injection flaw Satellite/Spacewalk: XSS in EditAddress page Spacewalk: PAGE_SIZE_LABEL_SELECTED cross-site scripting (XSS)
cpes: cpe:/a:redhat:network_satellite:5.6::el5 cpe:/a:redhat:network_satellite:5.6::el6 cpe:/a:redhat:network_satellite_managed_db:5.6::el5 cpe:/a:redhat:network_satellite_managed_db:5.6::el6