Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: SUSE Container suse/manager/5.0/x86_64/server:5.0.2.7.8.1, SUSE Manager Server Module 4.3 4.3.42-150400.3.52.1, 5.0.15-150600.3.10.2 Clear all filters
TI-2024-33009 CVE-2024-49502 · GHSA-gfm2-2cmr-j6jf

Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web

Priority LOW 21

A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in the Setup Wizard, HTTP Proxy credentials pane in spacewalk-web allows attackers to attack users by providing…

CVSS 4.0MEDIUM 4.6 Network High privileges User interaction EPSS 0.00295 Published 2024-11-28 Fixed in 5.0.15-150600.3.10.2, 4.3.42-150400.3.52.1 CWE-79
TI-2024-33010 CVE-2024-49503 · GHSA-966m-j2wr-w37h

Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web

Priority LOW 21

A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SUSE manager allows attackers to execute Javascript code in the organization credentials sub page.

CVSS 4.0MEDIUM 4.6 Network High privileges User interaction EPSS 0.00295 Published 2024-11-28 Fixed in 5.0.15-150600.3.10.2, 4.3.42-150400.3.52.1 CWE-79