spacewalk-config vulnerabilities (SUSE)
24 vulnerabilities.
spacewalk-configSUSESUSE Multi Linux Manager allows code execution via unprotected websocket endpoint9.3 Criticalspacewalk-configSUSEMulti Linux Manager epxoses the plain text HTTP Proxy user:password in logs6.9 Mediumspacewalk-configSUSEReflected XSS in spacewalk-java5.6 Mediumspacewalk-configSUSEReflected XSS in SystemsController.java in spacewalk-java5.6 Mediumspacewalk-configSUSEReflected XSS in Setup Wizard, Organization Credentials in spacewalk-web4.6 Mediumspacewalk-configSUSEReflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web4.6 Mediumspacewalk-configSUSECobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes9.8 Criticalspacewalk-configSUSEjose4j denial of service via specifically crafted JWE6.5 Mediumspacewalk-configSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumspacewalk-configSUSEJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 Criticalspacewalk-configSUSESUMA user enumeration via weak error message5.3 Mediumspacewalk-configSUSEPrototype Pollution7.5 Highspacewalk-configSUSEServer-Side Forgery Request can be activated unmarshalling with XStream6.3 Mediumspacewalk-configSUSEXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling6.8 Mediumspacewalk-configSUSESQL injection in hibernate-core7.4 Highspacewalk-configSUSERemote Code Execution in XStream8.0 Highspacewalk-configSUSEAllocation of Resources Without Limits or Throttling in Apache Tika8.8 Highspacewalk-configSUSEAllocation of Resources Without Limits or Throttling in Apache Tika7.8 Highspacewalk-configSUSEAllocation of Resources Without Limits or Throttling in Apache Tika6.5 Mediumspacewalk-configSUSEsusemanager installer creates world-readable swap files4.0 Mediumspacewalk-configSUSEBillion laughs attack in c3p07.5 Highspacewalk-configSUSEXML External Entity Reference in mchange:c3p09.8 Criticalspacewalk-configSUSEHigh severity vulnerability that affects org.apache.tika:tika-core7.5 Highspacewalk-configSUSEA cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite...3.5 Low