spacewalk-proxy-installer (SUSE:Manager Proxy Module 4.1) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Proxy Module 4.1 package spacewalk-proxy-installer, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2020-26217 — CVSS 8.0 (high): XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell…
• CVE-2020-28477 — CVSS 7.5 (high): This affects all versions of package immer.
• CVE-2020-26259 — CVSS 6.8 (medium): XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File…
• CVE-2020-26258 — CVSS 6.3 (medium): XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Forgery Request…