spacewalk-backend vulnerabilities (SUSE)
81 vulnerabilities.
spacewalk-backendSUSEspacewalk-java has various XSS issues on search page9.3 Criticalspacewalk-backendSUSESUSE Multi Linux Manager allows code execution via unprotected websocket endpoint9.3 Criticalspacewalk-backendSUSEMulti Linux Manager epxoses the plain text HTTP Proxy user:password in logs6.9 Mediumspacewalk-backendSUSEReflected XSS in spacewalk-java5.6 Mediumspacewalk-backendSUSEReflected XSS in SystemsController.java in spacewalk-java5.6 Mediumspacewalk-backendSUSEReflected XSS in Setup Wizard, Organization Credentials in spacewalk-web4.6 Mediumspacewalk-backendSUSEReflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web4.6 Mediumspacewalk-backendSUSECobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes9.8 Criticalspacewalk-backendSUSEInsecure handling SSH key in SUSE Manager when bootstrapping new clients6.4 Mediumspacewalk-backendSUSEjose4j denial of service via specifically crafted JWE6.5 Mediumspacewalk-backendSUSEjose4j uses weak cryptographic algorithm7.5 Highspacewalk-backendSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumspacewalk-backendSUSEJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 Criticalspacewalk-backendSUSEDrools: unsafe data deserialization in streamutils8.1 Highspacewalk-backendSUSESUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do2.6 Lowspacewalk-backendSUSESUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload4.3 Mediumspacewalk-backendSUSESUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction4.3 Mediumspacewalk-backendSUSEStack Buffer Overflow in Woodstox6.5 Mediumspacewalk-backendSUSEInefficient Regular Expression Complexity in moment7.5 Highspacewalk-backendSUSESUMA user enumeration via weak error message5.3 Mediumspacewalk-backendSUSESUMA unauthenticated remote DoS via resource exhaustion7.5 Highspacewalk-backendSUSEXML External Entity Reference in drools9.8 Criticalspacewalk-backendSUSEPrototype Pollution in async7.8 Highspacewalk-backendSUSEPrototype Pollution in minimist9.8 Criticalspacewalk-backendSUSEImproper Authorization in cobbler/cobbler8.2 Highspacewalk-backendSUSEpgjdbc Arbitrary File Write Vulnerability9.8 Criticalspacewalk-backendSUSEUncontrolled Resource Consumption in promhttp7.5 Highspacewalk-backendSUSEUnchecked Class Instantiation when providing Plugin Classes7.0 Highspacewalk-backendSUSESpacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config...8.8 Highspacewalk-backendSUSEImproper Neutralization of Special Elements used in a Command in Shell-quote9.8 Criticalspacewalk-backendSUSECobbler before 3.3.0 allows authorization bypass for modification of settings.7.5 Highspacewalk-backendSUSECobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.7.5 Highspacewalk-backendSUSECobbler before 3.3.0 allows log poisoning9.8 Criticalspacewalk-backendSUSEExposure of Resource to Wrong Sphere in salt7.5 Highspacewalk-backendSUSECommand Injection in SaltStack Salt7.8 Highspacewalk-backendSUSEInfinite loop in Apache Tika's MP3 parser5.5 Mediumspacewalk-backendSUSEAn XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser9.1 Criticalspacewalk-backendSUSEPrototype Pollution7.5 Highspacewalk-backendSUSEServer-Side Forgery Request can be activated unmarshalling with XStream6.3 Mediumspacewalk-backendSUSEXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling6.8 Mediumspacewalk-backendSUSESQL injection in hibernate-core7.4 Highspacewalk-backendSUSERemote Code Execution in XStream8.0 Highspacewalk-backendSUSESaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi9.8 Criticalspacewalk-backendSUSESaltStack Salt Allows creating certificates with weak file permissions5.5 Mediumspacewalk-backendSUSESaltStack Salt Command Injection in netapi ssh client9.8 Criticalspacewalk-backendSUSEFile size limit bypass in node-fetch2.6 Lowspacewalk-backendSUSESQL Injection in Hibernate ORM6.5 Mediumspacewalk-backendSUSEImproper Restriction of XML External Entity Reference7.7 Highspacewalk-backendSUSEjQuery has a potential XSS vulnerability6.9 Mediumspacewalk-backendSUSEPrototype Pollution in minimist5.6 Medium- Show olderLoading…