Skip to contentSuse Manager Server Module 4.3 vulnerabilities
- suse image sles15-sp4-manager-server-4-3-byos, image sles15-sp4-manager-server-4-3-byos-azure, image sles15-sp4-manager-server-4-3-byos-ec2 +3 more +5 moreSUSE Multi Linux Manager allows code execution via unprotected websocket endpointCVE-2025-46811Public exploitEPSS 13.6%9.3 Critical
- suse container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1, image sles15-sp4-manager-proxy-4-3-byos, image sles15-sp4-manager-proxy-4-3-byos-azure +10 more +12 moreMulti Linux Manager epxoses the plain text HTTP Proxy user:password in logsCVE-2025-468096.9 Medium
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.4.7.19.1 +1 moreReflected XSS in spacewalk-javaCVE-2025-233935.6 Medium
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.4.7.19.1 +1 moreReflected XSS in SystemsController.java in spacewalk-javaCVE-2025-23392Fix available5.6 Medium
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.2.7.8.1 +1 moreReflected XSS in Setup Wizard, Organization Credentials in spacewalk-webCVE-2024-495034.6 Medium
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.2.7.8.1 +1 moreReflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-webCVE-2024-495024.6 Medium
- suse manager server module 4.3Insecure handling SSH key in SUSE Manager when bootstrapping new clientsCVE-2023-321896.4 Medium