VendorsSUSEmanager_serverany version
Vulnerabilities

SUSE Manager Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2023-22644
JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
Published 2023-09-20 · Modified
9.4EPSS 0.005
CVE-2023-29552
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
Published 2023-04-25 · Analyzed
7.5KEVEPSS 0.659
CVE-2022-21952
SUMA unauthenticated remote DoS via resource exhaustion
Published 2022-06-22 · Analyzed
7.5EPSS 0.015
CVE-2022-43754
SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do
Published 2022-11-10 · Modified
5.4EPSS 0.004
CVE-2022-31248
SUMA user enumeration via weak error message
Published 2022-06-22 · Modified
5.3EPSS 0.010
CVE-2014-3595
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.
Published 2014-09-22 · Modified
4.3EPSS 0.018
CVE-2014-3654
Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do.
Published 2014-11-03 · Modified
4.3EPSS 0.018
CVE-2022-43753
SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload
Published 2022-11-10 · Modified
4.3EPSS 0.008
CVE-2022-31255
SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction
Published 2022-11-10 · Modified
4.3EPSS 0.007