MS
Product
Manager Server
On CISA KEVExploited in the wildRansomware-linked
12
CVEs
3
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 5Low 0
Watch
Add Manager Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22644 | 5.5 | Sep 20 | A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in… Affected: 4.2 before 4.2.50-150300.3.66.5; 4.3 before 4.3.58-150400.3.46.4 |
| CVE-2022-43754 | 5.4 | Nov 10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server… Affected: 4.2 before 4.2.10; 4.3 before 4.3.2 |
| CVE-2022-31248 | 5.3 | Jun 22 | A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames Affected: 4.1 before 4.1.46-1; 4.2 before 4.2.37-1 |
| CVE-2022-43753 | 4.3 | Nov 10 | A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE… Affected: 4.2 before 4.2.10; 4.3 before 4.3.2 |
| CVE-2022-31255 | 4.3 | Nov 10 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2,… Affected: 4.2 before 4.2.10; 4.3 before 4.3.2 |
Showing 5