Read the docs

Uyuni-project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Uyuni-project records in CISA KEV

No Uyuni-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Uyuni 4 records MEDIUM

Records

4 records

TI-2022-21488 CVE-2022-43754 · GHSA-vjvm-4cfh-7m4p

SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00468 Published 2022-11-10 Fixed in 4.2.28, 4.3.39 +1 CWE-79
TI-2022-21487 CVE-2022-43753 · GHSA-c2p9-h64p-qvv4

SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload

Priority LOW 22

A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00884 Published 2022-11-10 Fixed in 4.2.28, 4.3.39 +1 CWE-22
TI-2022-13288 CVE-2022-31255 · GHSA-fjgg-4cjq-r7wj

SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction

Priority LOW 22

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manage…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00834 Published 2022-11-10 Fixed in 4.2.28, 4.3.39 +1 CWE-22
Open these records in search →