Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Proxy Module 4.0 package supportutils-plugin-susemanager-proxy, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (3)
CVE-2020-1693 — CVSS 8.6 (high): A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An…
CVE-2018-1077 — CVSS 7.5 (high): Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server.
CVE-2019-16769 — CVSS 4.2 (medium): The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate…