openvpn-formula vulnerabilities (SUSE)

7 vulnerabilities.

• openvpn-formula SUSE Cobbler before 3.3.0 allows authorization bypass for modification of settings. CVE-2021-40325 Fix available 7.5 HighSeptember 20, 2021
• openvpn-formula SUSE Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. CVE-2021-40324 Fix available EPSS 68.6% 7.5 HighSeptember 20, 2021
• openvpn-formula SUSE Cobbler before 3.3.0 allows log poisoning CVE-2021-40323 Fix available EPSS 86.8% 9.8 CriticalSeptember 20, 2021
• openvpn-formula SUSE salt-api is accessible to every user on SUSE Manager Server CVE-2020-8028 Fix available 9.3 CriticalSeptember 16, 2020
• openvpn-formula SUSE SQL Injection in Hibernate ORM CVE-2019-14900 Public exploitFix available 6.5 MediumJuly 6, 2020
• openvpn-formula SUSE jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• openvpn-formula SUSE Prototype Pollution in minimist CVE-2020-7598 Public exploitFix available 5.6 MediumMarch 11, 2020