Known vulnerabilities in SUSE Manager Proxy - page 12

Vendor: SUSE
Software: SUSE Manager Proxy
Software CPE: cpe:2.3:o:suse:suse_manager_proxy:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 6824
Public exploits: 207
Known exploited (KEV): 70
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Manager Proxy SUSE Manager Proxy is affected by 6824 known vulnerabilities: 41 critical, 741 high, 1577 medium, 4465 low Critical High Medium Low

Vulnerabilities (6824)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123889 - Authentication Bypass by Primary Weakness
CVE-2026-3784		 CWE-305 Medium
No
No
 - 11.03.2026 -
#VU123887 - Use After Free
CVE-2026-3805		 CWE-416 Medium
No
No
 - 11.03.2026 -
#VU123562 - Asymmetric Resource Consumption (Amplification)
CVE-2025-68480		 CWE-405 Medium
No
No
 - 05.03.2026 -
#VU123468 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-1703		 CWE-22 Low
No
No
 - 03.03.2026 -
#VU122976 - Type conversion
CVE-2025-12781		 CWE-704 Low
No
No
 - 17.02.2026 -
#VU122819 - Command injection
CVE-2025-15367		 CWE-77 Medium
No
No
 - 13.02.2026 -
#VU122818 - Command injection
CVE-2025-15366		 CWE-77 Medium
No
No
 - 13.02.2026 -
#VU122816 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-15282		 CWE-93 Medium
No
No
 - 13.02.2026 -
#VU122815 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-0865		 CWE-444 Medium
No
No
 - 13.02.2026 -
#VU122814 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-0672		 CWE-93 Medium
No
No
 - 13.02.2026 -
#VU122813 - Improper input validation
CVE-2025-11468		 CWE-20 Medium
No
No
 - 13.02.2026 -
#VU120998 - Resource exhaustion
CVE-2025-69229		 CWE-400 Medium
No
No
 - 06.01.2026 -
#VU120996 - Resource exhaustion
CVE-2025-69228		 CWE-400 Medium
No
No
 - 06.01.2026 -
#VU120995 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-69227		 CWE-835 Medium
No
No
 - 06.01.2026 -
#VU120994 - Exposure of sensitive information to an unauthorized actor
CVE-2025-69226		 CWE-200 Low
No
No
 - 06.01.2026 -
#VU120993 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-69225		 CWE-444 Low
No
No
 - 06.01.2026 -
#VU120992 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-69224		 CWE-444 Low
No
No
 - 06.01.2026 -
#VU120990 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2025-69223		 CWE-409 Medium
No
No
 - 06.01.2026 -
#VU111584 - Improper Locking
CVE-2022-49943		 CWE-667 Low
No
No
 - 20.06.2025 -
#VU104826 - Race Condition within a Thread
CVE-2022-49604		 CWE-366 Low
No
No
 - 26.02.2025 -


Showing elements 221 - 240 out of 6824