uyuni-reportdb-schema (SUSE:Manager Server Module 4.3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Server Module 4.3 package uyuni-reportdb-schema, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (8)

• CVE-2021-41411 — CVSS 9.8 (critical): drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used…
• CVE-2024-47533 — CVSS 9.8 (critical): Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication…
• CVE-2022-0860 — CVSS 9.1 (critical): Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
• CVE-2023-31582 — CVSS 7.5 (high): jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.
• CVE-2023-51775 — CVSS 6.5 (medium): The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2…
• CVE-2023-32189 — CVSS 5.9 (medium): Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys
• CVE-2024-49502 — CVSS 3.5 (low): A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in the Setup Wizard, HTTP Proxy…
• CVE-2024-49503 — CVSS 3.5 (low): A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SUSE manager allows…