How severe is CVE-2014-8162?

CVE-2014-8162 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2014-8162 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (84th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2014-8162?

CVE-2014-8162 primarily affects Redhat Network Satellite. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2014-8162?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2014-8162 published?

CVE-2014-8162 was published on 2015-05-14 and last updated on 2026-06-17.

CVE-2014-8162

CVE-2014-8162 is a high-severity vulnerability in Redhat Network Satellite with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.5)
EPSS exploit prediction: 3% (84th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Redhat Network Satellite
Published: 2015-05-14
Last modified: 2026-06-17

Description

XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors.

Frequently asked questions

What is CVE-2014-8162?: XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors.
How severe is CVE-2014-8162?: CVE-2014-8162 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2014-8162 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (84th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2014-8162?: CVE-2014-8162 primarily affects Redhat Network Satellite. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2014-8162?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2014-8162 published?: CVE-2014-8162 was published on 2015-05-14 and last updated on 2026-06-17.

References

Affected products (2)

cpe:2.3:a:redhat:network_satellite:*:*:*:*:*:*:*:*
cpe:2.3:a:suse:manager:1.7:*:*:*:*:*:*:*

More vulnerabilities in Redhat Network Satellite

CVE-2013-4480 — High (CVSS 7.5): Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a…
CVE-2013-2143 — Medium (CVSS 6.5): The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the…
CVE-2011-1594 — Medium (CVSS 6.5): A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote…
CVE-2011-2920 — Medium (CVSS 5.5): A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a…
CVE-2011-3344 — Medium (CVSS 5.4): A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup…
CVE-2011-2927 — Medium (CVSS 5.4): A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS),…

All CVEs affecting Redhat Network Satellite →