Known vulnerabilities in SUSE Manager

Known vulnerabilities in SUSE Manager

Vendor: SUSE

Software: SUSE Manager

Software CPE: cpe:2.3:a:suse:suse_manager:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 14

Public exploits: 4

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU51588 - Incorrect Implementation of Authentication Algorithm CVE-2021-25315	CWE-303	Low	No	No	-	22.03.2021	SB2021032203 SB2021062235 SB2021062236 and 8 more
#VU50988 - Permissions, Privileges, and Access Controls CVE-2020-28243	CWE-264	Medium	Available	No	-	28.02.2021	SB2021022809 SB2021022810 SB2021032201 and 29 more
#VU50987 - Improper Certificate Validation CVE-2020-28972	CWE-295	Medium	No	No	-	28.02.2021	SB2021022809 SB2021022810 SB2021032201 and 29 more
#VU50986 - Improper Authentication CVE-2021-3144	CWE-287	High	No	No	-	28.02.2021	SB2021022809 SB2021022810 SB2021032201 and 28 more
#VU50985 - Improper Certificate Validation CVE-2020-35662	CWE-295	Medium	No	No	-	28.02.2021	SB2021022809 SB2021022810 SB2021032201 and 29 more
#VU50984 - Command injection CVE-2021-3148	CWE-77	Medium	No	No	-	28.02.2021	SB2021022809 SB2021022810 SB2021032201 and 29 more
#VU50983 - Information Exposure Through Log Files CVE-2021-25284	CWE-532	Low	No	No	-	28.02.2021	SB2021022809 SB2021022810 SB2021032201 and 29 more
#VU50982 - Improper Control of Generation of Code ('Code Injection') CVE-2021-25283	CWE-94	High	No	No	-	28.02.2021	SB2021022809 SB2021022810 SB2021032201 and 29 more
#VU50981 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2021-3197	CWE-78	High	No	No	-	28.02.2021	SB2021022809 SB2021022810 SB2021032201 and 29 more
#VU50980 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-25282	CWE-22	Medium	Available	No	-	28.02.2021	SB2021022809 SB2021022810 SB2021032201 and 29 more
#VU50979 - Improper Access Control CVE-2021-25281	CWE-284	Medium	Available	No	-	28.02.2021	SB2021022809 SB2021022810 SB2021032201 and 29 more
#VU5215 - Exposed Dangerous Method or Function CVE-2014-3568	CWE-749	Low	No	No	-	20.01.2017	SB2014101601 SB2015092611 SB2014101501 and 17 more
#VU5214 - Use of a Broken or Risky Cryptographic Algorithm CVE-2014-3566	CWE-327	Medium	Available	No	-	20.01.2017	SB2014101601 SB2014102102 SB2016022401 and 78 more
#VU5213 - Missing release of memory after effective lifetime CVE-2014-3567	CWE-401	Medium	No	No	-	20.01.2017	SB2014101601 SB2015101602 SB2015092611 and 20 more