release-notes-susemanager vulnerabilities (SUSE)
93 vulnerabilities.
release-notes-susemanagerSUSEJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 Criticalrelease-notes-susemanagerSUSEDrools: unsafe data deserialization in streamutils8.1 Highrelease-notes-susemanagerSUSESecurity update for SUSE Manager Server 4.2No scorerelease-notes-susemanagerSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumrelease-notes-susemanagerSUSESUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do2.6 Lowrelease-notes-susemanagerSUSESUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload4.3 Mediumrelease-notes-susemanagerSUSESUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction4.3 Mediumrelease-notes-susemanagerSUSEInefficient Regular Expression Complexity in moment7.5 Highrelease-notes-susemanagerSUSESUMA user enumeration via weak error message5.3 Mediumrelease-notes-susemanagerSUSESUMA unauthenticated remote DoS via resource exhaustion7.5 Highrelease-notes-susemanagerSUSEXML External Entity Reference in drools9.8 Criticalrelease-notes-susemanagerSUSEPrototype Pollution in async7.8 Highrelease-notes-susemanagerSUSESaltStack Salt Permissions Bypass8.8 Highrelease-notes-susemanagerSUSESaltStack Salt Authentication Bypass by Capture-replay8.8 Highrelease-notes-susemanagerSUSESaltStack Salt Improper Authentication via Man in the Middle Attack3.7 Lowrelease-notes-susemanagerSUSESaltStack Improper Verification of Cryptographic Signature8.8 Highrelease-notes-susemanagerSUSEPrototype Pollution in minimist9.8 Criticalrelease-notes-susemanagerSUSEImproper Authorization in cobbler/cobbler8.2 Highrelease-notes-susemanagerSUSEpgjdbc Arbitrary File Write Vulnerability9.8 Criticalrelease-notes-susemanagerSUSEUnchecked Class Instantiation when providing Plugin Classes7.0 Highrelease-notes-susemanagerSUSESpacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config...8.8 Highrelease-notes-susemanagerSUSEImproper Neutralization of Special Elements used in a Command in Shell-quote9.8 Criticalrelease-notes-susemanagerSUSECobbler before 3.3.0 allows authorization bypass for modification of settings.7.5 Highrelease-notes-susemanagerSUSECobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.7.5 Highrelease-notes-susemanagerSUSECobbler before 3.3.0 allows log poisoning9.8 Criticalrelease-notes-susemanagerSUSEExposure of Resource to Wrong Sphere in salt7.5 Highrelease-notes-susemanagerSUSESaltStack Salt is vulnerable to shell injection via ProxyCommand argument9.8 Criticalrelease-notes-susemanagerSUSESaltStack Salt command injection in the Salt-API when using the Salt-SSH client9.8 Criticalrelease-notes-susemanagerSUSESaltStack Salt eauth tokens can be used once after expiration9.1 Criticalrelease-notes-susemanagerSUSESaltStack Salt Cleartext Storage of Sensitive Information via cmdmod4.4 Mediumrelease-notes-susemanagerSUSESaltStack Salt Server Side Template Injection9.8 Criticalrelease-notes-susemanagerSUSESaltStack Salt Directory Traversal vulnerability9.1 Criticalrelease-notes-susemanagerSUSESaltStack Salt Improper Authentication vulnerability9.8 Criticalrelease-notes-susemanagerSUSESaltStack Salt Improper SSL Certificate Validation7.4 Highrelease-notes-susemanagerSUSESaltStack Salt Improper Certificate Validation5.9 Mediumrelease-notes-susemanagerSUSESaltStack Salt command injection via a crafted process name7.8 Highrelease-notes-susemanagerSUSEjQuery has a potential XSS vulnerability6.9 Mediumrelease-notes-susemanagerSUSEIt was found that Spacewalk, all versions through 2.8, did not safely compute client token...4.3 Mediumrelease-notes-susemanagerSUSEA path traversal flaw was found in spacewalk-proxy, all versions through 2.8, in the way the...8.1 Highrelease-notes-susemanagerSUSECobbler Improper Validation of Security Tokens9.8 Criticalrelease-notes-susemanagerSUSECobbler XSS Vulnerability6.1 Mediumrelease-notes-susemanagerSUSEModerate severity vulnerability that affects com.sparkjava:spark-core5.3 Mediumrelease-notes-susemanagerSUSEA cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red...4.3 Medium