Advisories · Technology

SUSE Image SLES15-SP4-Manager-Server-4-3-BYOS.

Every CVE that names SUSE Image SLES15-SP4-Manager-Server-4-3-BYOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-46809 CVE record

CVSS 6.9 Medium

Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs
- Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1
- Container suse/manager/5.0/x86_64/proxy-httpd:5.0.5.7.23.1
- CWE-256
Not analysed yet 31 Jul 2025
CVE-2025-46811 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint
- Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1
- SUSE Image SLES15-SP4-Manager-Server-4-3-BYOS
- Broken access control
Not analysed yet 30 Jul 2025