supportutils-plugin-susemanager vulnerabilities (SUSE)
21 vulnerabilities.
-
supportutils-plugin-susemanagerSUSE SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint 9.3 Critical -
supportutils-plugin-susemanagerSUSE Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs 6.9 Medium -
supportutils-plugin-susemanagerSUSE Reflected XSS in spacewalk-java 5.6 Medium -
supportutils-plugin-susemanagerSUSE Reflected XSS in SystemsController.java in spacewalk-java 5.6 Medium -
supportutils-plugin-susemanagerSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
supportutils-plugin-susemanagerSUSE jose4j denial of service via specifically crafted JWE 6.5 Medium -
supportutils-plugin-susemanagerSUSE jose4j uses weak cryptographic algorithm 7.5 High -
supportutils-plugin-susemanagerSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
supportutils-plugin-susemanagerSUSE JWT token compromise can allow malicious actions including Remote Code Execution (RCE) 9.4 Critical -
supportutils-plugin-susemanagerSUSE Drools: unsafe data deserialization in streamutils 8.1 High -
supportutils-plugin-susemanagerSUSE Stack Buffer Overflow in Woodstox 6.5 Medium -
supportutils-plugin-susemanagerSUSE Inefficient Regular Expression Complexity in moment 7.5 High -
supportutils-plugin-susemanagerSUSE Improper Authorization in cobbler/cobbler 8.2 High -
supportutils-plugin-susemanagerSUSE Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config... 8.8 High -
supportutils-plugin-susemanagerSUSE Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
supportutils-plugin-susemanagerSUSE Exposure of Resource to Wrong Sphere in salt 7.5 High -
supportutils-plugin-susemanagerSUSE An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser 9.1 Critical -
supportutils-plugin-susemanagerSUSE Improper Restriction of XML External Entity Reference 7.7 High -
supportutils-plugin-susemanagerSUSE Billion laughs attack in c3p0 7.5 High -
supportutils-plugin-susemanagerSUSE XML External Entity Reference in mchange:c3p0 9.8 Critical -
supportutils-plugin-susemanagerSUSE A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red... 4.3 Medium