Advisories · Technology

SUSE Linux Enterprise Module for SUSE Manager Server 4.3.

Every CVE that names SUSE Linux Enterprise Module for SUSE Manager Server 4.3 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-43754 CVE record

CVSS 2.6 Low

SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do
- SUSE Linux Enterprise Module for SUSE Manager Server 4.2
- SUSE Linux Enterprise Module for SUSE Manager Server 4.3
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-43753 CVE record

CVSS 4.3 Medium

SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload
- SUSE Linux Enterprise Module for SUSE Manager Server 4.2
- SUSE Linux Enterprise Module for SUSE Manager Server 4.3
- Path traversal
Not analysed yet 10 Nov 2022
CVE-2022-31255 CVE record

CVSS 4.3 Medium

SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction
- SUSE Linux Enterprise Module for SUSE Manager Server 4.2
- SUSE Linux Enterprise Module for SUSE Manager Server 4.3
- Path traversal
Not analysed yet 10 Nov 2022