squid (SUSE:Enterprise Storage 4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Enterprise Storage 4 package squid, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2019-12525 — CVSS 9.8 (critical): An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authentication, it parses…
• CVE-2019-13345 — CVSS 6.1 (medium): The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.
• CVE-2019-12529 — CVSS 5.9 (medium): An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic…