spacewalk-proxy vulnerabilities (SUSE)

23 vulnerabilities.

• spacewalk-proxy SUSE Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web CVE-2024-49503 4.6 MediumNovember 18, 2024
• spacewalk-proxy SUSE Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web CVE-2024-49502 4.6 MediumNovember 18, 2024
• spacewalk-proxy SUSE Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes CVE-2024-47533 Public exploitFix available 9.8 CriticalNovember 18, 2024
• spacewalk-proxy SUSE JWT token compromise can allow malicious actions including Remote Code Execution (RCE) CVE-2023-22644 Fix available 9.4 CriticalJune 21, 2023
• spacewalk-proxy SUSE Drools: unsafe data deserialization in streamutils CVE-2022-1415 Fix available 8.1 HighFebruary 10, 2023
• spacewalk-proxy SUSE Stack Buffer Overflow in Woodstox CVE-2022-40152 Fix available EPSS 18.2% 6.5 MediumSeptember 16, 2022
• spacewalk-proxy SUSE Inefficient Regular Expression Complexity in moment CVE-2022-31129 Fix available 7.5 HighJuly 6, 2022
• spacewalk-proxy SUSE XML External Entity Reference in drools CVE-2021-41411 Fix available 9.8 CriticalJune 16, 2022
• spacewalk-proxy SUSE Prototype Pollution in async CVE-2021-43138 Fix available 7.8 HighApril 6, 2022
• spacewalk-proxy SUSE Improper Authorization in cobbler/cobbler CVE-2022-0860 Fix available 8.2 HighMarch 11, 2022
• spacewalk-proxy SUSE Improper Neutralization of Special Elements used in a Command in Shell-quote CVE-2021-42740 Fix available 9.8 CriticalOctober 21, 2021
• spacewalk-proxy SUSE Prototype Pollution CVE-2020-28477 Fix available 7.5 HighJanuary 19, 2021
• spacewalk-proxy SUSE Server-Side Forgery Request can be activated unmarshalling with XStream CVE-2020-26258 Public exploitFix available EPSS 81.8% 6.3 MediumDecember 16, 2020
• spacewalk-proxy SUSE XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling CVE-2020-26259 Public exploitFix available EPSS 82.4% 6.8 MediumDecember 16, 2020
• spacewalk-proxy SUSE Remote Code Execution in XStream CVE-2020-26217 Public exploitFix available EPSS 85.0% 8.0 HighNovember 16, 2020
• spacewalk-proxy SUSE salt-api is accessible to every user on SUSE Manager Server CVE-2020-8028 Fix available 9.3 CriticalSeptember 16, 2020
• spacewalk-proxy SUSE SQL Injection in Hibernate ORM CVE-2019-14900 Public exploitFix available 6.5 MediumJuly 6, 2020
• spacewalk-proxy SUSE jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• spacewalk-proxy SUSE It was found that Spacewalk, all versions through 2.8, did not safely compute client token... CVE-2019-10136 Fix available 4.3 MediumJuly 2, 2019
• spacewalk-proxy SUSE A path traversal flaw was found in spacewalk-proxy, all versions through 2.8, in the way the... CVE-2019-10137 Fix available 8.1 HighJuly 2, 2019
• spacewalk-proxy SUSE susemanager installer creates world-readable swap files CVE-2019-3684 Fix available 4.0 MediumMay 13, 2019
• spacewalk-proxy SUSE JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even... CVE-2017-10807 Fix available 9.8 CriticalJuly 4, 2017
• spacewalk-proxy SUSE It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform... CVE-2017-7470 Fix available 6.5 MediumMay 18, 2017