Advisories · Technology

SUSE Manager Server 4.2.

Every CVE that names SUSE Manager Server 4.2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-43754 CVE record

CVSS 2.6 Low

SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do
- SUSE Linux Enterprise Module for SUSE Manager Server 4.2
- SUSE Linux Enterprise Module for SUSE Manager Server 4.3
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-43753 CVE record

CVSS 4.3 Medium

SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload
- SUSE Linux Enterprise Module for SUSE Manager Server 4.2
- SUSE Linux Enterprise Module for SUSE Manager Server 4.3
- Path traversal
Not analysed yet 10 Nov 2022
CVE-2022-31255 CVE record

CVSS 4.3 Medium

SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction
- SUSE Linux Enterprise Module for SUSE Manager Server 4.2
- SUSE Linux Enterprise Module for SUSE Manager Server 4.3
- Path traversal
Not analysed yet 10 Nov 2022
CVE-2022-31248 CVE record

CVSS 5.3 Medium

SUMA user enumeration via weak error message
- SUSE Manager Server 4.1
- SUSE Manager Server 4.2
- CWE-204
Not analysed yet 22 Jun 2022
CVE-2022-21952 CVE record

CVSS 7.5 High

SUMA unauthenticated remote DoS via resource exhaustion
- SUSE Manager Server 4.1
- SUSE Manager Server 4.2
- Authentication bypass
- Denial of service
Not analysed yet 22 Jun 2022