Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Uyuni-project Component: Uyuni Clear all filters
TI-2022-21488 CVE-2022-43754 · GHSA-vjvm-4cfh-7m4p

SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00468 Published 2022-11-10 Fixed in 4.2.28, 4.3.39 +1 CWE-79
TI-2022-21487 CVE-2022-43753 · GHSA-c2p9-h64p-qvv4

SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload

Priority LOW 22

A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00884 Published 2022-11-10 Fixed in 4.2.28, 4.3.39 +1 CWE-22
TI-2022-13288 CVE-2022-31255 · GHSA-fjgg-4cjq-r7wj

SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction

Priority LOW 22

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manage…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00834 Published 2022-11-10 Fixed in 4.2.28, 4.3.39 +1 CWE-22