Suse Manager Server Module 4.3 (Suse) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-07-31. Vendor: Suse.
CVEs of Suse Manager Server Module 4.3
- CVE-2025-46809 - CVSS 6.9 (medium), 2025-07-31: A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Container…
- CVE-2025-46811 - CVSS 9.8 (critical), 2025-07-30: A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command…
- CVE-2025-23393 - CVSS 5.6 (medium), 2025-05-27: A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in spacewalk-java allows execution of arbitrary Javascript code…
- CVE-2025-23392 - CVSS 5.6 (medium), 2025-05-26: A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in spacewalk-java allows execution of arbitrary Javascript code…
- CVE-2024-49503 - CVSS 4.6 (medium), 2024-11-28: A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SUSE manager allows attackers to execute…
- CVE-2024-49502 - CVSS 4.6 (medium), 2024-11-28: A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in the Setup Wizard, HTTP Proxy credentials pane…
- CVE-2023-32189 - CVSS 6.4 (medium), 2024-10-16: Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys
