[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXZJwZUIc08tw0PHBPGKVY9invNudP1rMe4BFznsElX4":3,"g5a-family:suse\u002Fmanager_server":168,"g5a-ex:suse\u002Fmanager_server@*":169},{"success":4,"data":5},true,{"product":6,"versions":57,"topVulnerabilitiesByEpss":77,"kevVulnerabilities":135,"seoMetadata":146,"meta":165},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":56},"suse","manager_server",19,16,2,"2023-09-20",[14,19,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"3.2",1,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"4.0",4,{"version":23,"cve_count":21,"kev_count":16,"has_kev":4},"4.1",{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},"4.2",{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.1",{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.10",{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.2",{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.3",{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.4",{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.5",{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.50-150300.3.66.5",{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.6",{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.7",{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.8",{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},"4.2.9",{"version":49,"cve_count":16,"kev_count":17,"has_kev":18},"4.3",{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},"4.3.1",{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},"4.3.2",{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},"4.3.58-150400.3.46.4","Manager Server by Suse is a technology product with 19 tracked versions and 16 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":21,"kev_count":16,"has_kev":4},{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},{"version":49,"cve_count":16,"kev_count":17,"has_kev":18},{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},[78,86,92,100,104,109,116,121,126,130],{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":83,"severity":84,"isKev":4,"epssScore":85},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",7.8,"v3.1","High",0.94921,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":83,"severity":84,"isKev":4,"epssScore":91},"CVE-2023-29552","The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.","2023-04-25",7.5,0.63975,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":97,"severity":98,"isKev":18,"epssScore":99},"CVE-2014-3595","Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.","2014-09-22",4.3,"v2","Medium",0.01759,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":96,"cvssVersion":97,"severity":98,"isKev":18,"epssScore":99},"CVE-2014-3654","Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart\u002Fcobbler\u002FCustomSnippetList.do, (2) channels\u002Fsoftware\u002FEntitlements.do, or (3) admin\u002Fmultiorg\u002FOrgUsers.do.","2014-11-03",{"cveId":105,"description":106,"publishedDate":107,"cvssScore":90,"cvssVersion":83,"severity":84,"isKev":18,"epssScore":108},"CVE-2022-21952","A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.","2022-06-22",0.01546,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"cvssVersion":83,"severity":114,"isKev":18,"epssScore":115},"CVE-2019-18906","A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.","2021-06-30",9.8,"Critical",0.01111,{"cveId":117,"description":118,"publishedDate":107,"cvssScore":119,"cvssVersion":83,"severity":98,"isKev":18,"epssScore":120},"CVE-2022-31248","A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.",5.3,0.01018,{"cveId":122,"description":123,"publishedDate":124,"cvssScore":96,"cvssVersion":83,"severity":98,"isKev":18,"epssScore":125},"CVE-2022-43753","A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk\u002FUyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files available to the user running the process, typically tomcat. This issue affects: SUSE Linux Enterprise Module for SUSE Manager Server 4.2 hub-xmlrpc-api-0.7-150300.3.9.2, inter-server-sync-0.2.4-150300.8.25.2, locale-formula-0.3-150300.3.3.2, py27-compat-salt-3000.3-150300.7.7.26.2, python-urlgrabber-3.10.2.1py2_3-150300.3.3.2, spacecmd-4.2.20-150300.4.30.2, spacewalk-backend-4.2.25-150300.4.32.4, spacewalk-client-tools-4.2.21-150300.4.27.3, spacewalk-java-4.2.43-150300.3.48.2, spacewalk-utils-4.2.18-150300.3.21.2, spacewalk-web-4.2.30-150300.3.30.3, susemanager-4.2.38-150300.3.44.3, susemanager-doc-indexes-4.2-150300.12.36.3, susemanager-docs_en-4.2-150300.12.36.2, susemanager-schema-4.2.25-150300.3.30.3, susemanager-sls versions prior to 4.2.28. SUSE Linux Enterprise Module for SUSE Manager Server 4.3 spacewalk-java versions prior to 4.3.39. SUSE Manager Server 4.2 release-notes-susemanager versions prior to 4.2.10.","2022-11-10",0.00796,{"cveId":127,"description":128,"publishedDate":124,"cvssScore":96,"cvssVersion":83,"severity":98,"isKev":18,"epssScore":129},"CVE-2022-31255","An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk\u002FUyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files available to the user running the process, typically tomcat. This issue affects: SUSE Linux Enterprise Module for SUSE Manager Server 4.2 hub-xmlrpc-api-0.7-150300.3.9.2, inter-server-sync-0.2.4-150300.8.25.2, locale-formula-0.3-150300.3.3.2, py27-compat-salt-3000.3-150300.7.7.26.2, python-urlgrabber-3.10.2.1py2_3-150300.3.3.2, spacecmd-4.2.20-150300.4.30.2, spacewalk-backend-4.2.25-150300.4.32.4, spacewalk-client-tools-4.2.21-150300.4.27.3, spacewalk-java-4.2.43-150300.3.48.2, spacewalk-utils-4.2.18-150300.3.21.2, spacewalk-web-4.2.30-150300.3.30.3, susemanager-4.2.38-150300.3.44.3, susemanager-doc-indexes-4.2-150300.12.36.3, susemanager-docs_en-4.2-150300.12.36.2, susemanager-schema-4.2.25-150300.3.30.3, susemanager-sls versions prior to 4.2.28. SUSE Linux Enterprise Module for SUSE Manager Server 4.3 spacewalk-java versions prior to 4.3.39. SUSE Manager Server 4.2 release-notes-susemanager versions prior to 4.2.10.",0.00751,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":82,"cvssVersion":83,"severity":84,"isKev":18,"epssScore":134},"CVE-2022-27239","In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.","2022-04-27",0.00576,[136,141],{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"severity":84,"isKev":4,"epssScore":91,"cisaVulnName":137,"cisaDateAdded":138,"cisaShortDescription":139,"cisaRequiredAction":140},"Service Location Protocol (SLP) Denial-of-Service Vulnerability","2023-11-08","The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.","Apply mitigations per vendor instructions or disable SLP service or port 427\u002FUDP on all systems running on untrusted networks, including those directly connected to the Internet.",{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"severity":84,"isKev":4,"epssScore":85,"cisaVulnName":142,"cisaDateAdded":143,"cisaShortDescription":144,"cisaRequiredAction":145},"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.","Apply updates per vendor instructions.",{"title":147,"metaDescription":148,"keywords":149,"structuredData":150},"Manager Server by Suse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Manager Server by Suse covering 19 versions with 16 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Manager Server vulnerabilities, Manager Server security, Manager Server CVE, Suse Manager Server, Manager Server threat intelligence, Suse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Manager Server KEV, Manager Server exploited vulnerabilities",{"@context":151,"@type":152,"name":153,"description":148,"url":154,"manufacturer":155,"applicationCategory":159,"softwareVersion":160,"mainEntity":161},"https:\u002F\u002Fschema.org","SoftwareApplication","Manager Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsuse\u002Fmanager_server",{"@type":156,"name":157,"url":158},"Organization","Suse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsuse","Security Software","19 versions tracked",{"@type":162,"name":163,"description":164,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Manager Server Security Vulnerabilities","Security vulnerabilities affecting Manager Server by Suse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":166,"apiVersion":167},"2026-10-17T16:30:14.206Z","3.0",[],{"rows":170,"total":11,"capped":18,"failed":17},[171,175],{"cveId":87,"name":137,"severity":84,"cvss":90,"added":138,"epss":91,"published":172,"ranges":173,"checked":4,"hits":174,"covers":18},"2023-04-25T16:15:09.537",[],[],{"cveId":79,"name":142,"severity":84,"cvss":82,"added":143,"epss":85,"published":176,"ranges":177,"checked":4,"hits":178,"covers":18},"2022-01-28T20:15:12.193",[23],[]]