MS
Product
Manager Server
On CISA KEVExploited in the wildRansomware-linked
12
CVEs
3
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 5Low 0
Watch
Add Manager Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: 4.0; 4.1; 4.2; 4.3 |
| CVE-2021-4034 RansomwareIn wildKEV | 7.8 | Jan 28 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Affected: 4.1 |
| CVE-2023-29552 In wildKEV | 7.5 | Apr 25 | Service Location Protocol (SLP) Denial-of-Service Vulnerability Affected: All versions, or not specified |
| CVE-2022-27239 | 7.8 | Apr 27 | In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges Affected: 4.1; 4.2; 4.3 |
| CVE-2022-21952 | 7.5 | Jun 22 | A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust… Affected: 4.1 before 4.1.46; 4.2 before 4.2.37 |
| CVE-2023-22644 | 5.5 | Sep 20 | A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in… Affected: 4.2 before 4.2.50-150300.3.66.5; 4.3 before 4.3.58-150400.3.46.4 |
| CVE-2022-43754 | 5.4 | Nov 10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server… Affected: 4.2 before 4.2.10; 4.3 before 4.3.2 |
| CVE-2022-31248 | 5.3 | Jun 22 | A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames Affected: 4.1 before 4.1.46-1; 4.2 before 4.2.37-1 |
| CVE-2022-43753 | 4.3 | Nov 10 | A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE… Affected: 4.2 before 4.2.10; 4.3 before 4.3.2 |
| CVE-2022-31255 | 4.3 | Nov 10 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2,… Affected: 4.2 before 4.2.10; 4.3 before 4.3.2 |
| CVE-2014-3654 | – | Nov 3 | Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary… Affected: All versions, or not specified |
| CVE-2014-3595 | – | Sep 22 | Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to… Affected: All versions, or not specified |
Showing 12