Code Injection in Apache Commons OGNL - CVE-2025-53192

Vulnerability identifier: #VU114218

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-53192

CWE-ID: CWE-94

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation when handling the API Ognl.getValue. A remote attacker can send a specially crafted data and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Apache Commons OGNL
SUSE Manager Proxy 4.3
SUSE Multi-Linux Manager Server 5.1 Extension for
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for
SUSE Multi-Linux Manager Proxy 5.1 Extension for
SUSE Manager Server 4.3
SUSE Manager Retail Branch Server 4.3
SUSE Manager Server 5.0
SUSE Manager Retail Branch Server 5.0
SUSE Manager Proxy 5.0
SUSE Linux Enterprise Server 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap
ognl
ognl-javadoc
mybatis
mybatis-javadoc
release-notes-susemanager-proxy
release-notes-susemanager
suse-manager-5.0-ppc64le-server-hub-xmlrpc-api-image
suse-manager-5.0-aarch64-server-hub-xmlrpc-api-image
suse-manager-5.0-x86_64-server-hub-xmlrpc-api-image
suse-manager-5.0-s390x-server-hub-xmlrpc-api-image
suse-manager-5.0-ppc64le-server-attestation-image
suse-manager-5.0-aarch64-server-attestation-image
suse-manager-5.0-s390x-server-attestation-image
suse-manager-5.0-x86_64-server-attestation-image
suse-manager-5.0-s390x-proxy-squid-image
suse-manager-5.0-s390x-proxy-ssh-image
suse-manager-5.0-ppc64le-proxy-tftpd-image
suse-manager-5.0-s390x-proxy-tftpd-image
suse-manager-5.0-x86_64-proxy-ssh-image
suse-manager-5.0-x86_64-proxy-tftpd-image
suse-manager-5.0-ppc64le-proxy-ssh-image
suse-manager-5.0-x86_64-proxy-squid-image
suse-manager-5.0-ppc64le-proxy-squid-image
suse-manager-5.0-aarch64-proxy-ssh-image
suse-manager-5.0-aarch64-proxy-squid-image
suse-manager-5.0-aarch64-proxy-tftpd-image
suse-manager-5.0-x86_64-server-migration-14-16-image
suse-manager-5.0-s390x-server-migration-14-16-image
suse-manager-5.0-ppc64le-server-migration-14-16-image
suse-manager-5.0-aarch64-server-migration-14-16-image
suse-manager-5.0-x86_64-proxy-httpd-image
suse-manager-5.0-s390x-proxy-httpd-image
suse-manager-5.0-ppc64le-proxy-httpd-image
suse-manager-5.0-aarch64-proxy-httpd-image
suse-manager-5.0-x86_64-proxy-salt-broker-image
suse-manager-5.0-s390x-proxy-salt-broker-image
suse-manager-5.0-ppc64le-proxy-salt-broker-image
suse-manager-5.0-aarch64-proxy-salt-broker-image
suse-manager-5.0-aarch64-server-image
suse-manager-5.0-s390x-server-image
suse-manager-5.0-x86_64-server-image
suse-manager-5.0-ppc64le-server-image
suse-multi-linux-manager-5.1-s390x-server-postgresql-image
suse-multi-linux-manager-5.1-aarch64-server-postgresql-image
suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image
suse-multi-linux-manager-5.1-x86_64-server-postgresql-image
suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image
suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image
suse-multi-linux-manager-5.1-s390x-proxy-squid-image
suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image
suse-multi-linux-manager-5.1-s390x-proxy-ssh-image
suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image
suse-multi-linux-manager-5.1-x86_64-proxy-squid-image
suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image
suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image
suse-multi-linux-manager-5.1-aarch64-proxy-squid-image
suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image
suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image
suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image
suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image
suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image
suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image
suse-multi-linux-manager-5.1-s390x-server-image
suse-multi-linux-manager-5.1-aarch64-server-image
suse-multi-linux-manager-5.1-ppc64le-server-image
suse-multi-linux-manager-5.1-x86_64-server-image
suse-multi-linux-manager-5.1-x86_64-server-attestation-image
suse-multi-linux-manager-5.1-s390x-server-attestation-image
suse-multi-linux-manager-5.1-ppc64le-server-attestation-image
suse-multi-linux-manager-5.1-aarch64-server-attestation-image
suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image
suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image
suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image
suse-multi-linux-manager-5.1-s390x-proxy-httpd-image
suse-multi-linux-manager-5.1-s390x-server-saline-image
suse-multi-linux-manager-5.1-ppc64le-server-saline-image
suse-multi-linux-manager-5.1-x86_64-server-saline-image
suse-multi-linux-manager-5.1-aarch64-server-saline-image
suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image
suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image
suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image
suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image
mgrctl
mgrpxy-debuginfo
mgradm
mgradm-debuginfo
mgrpxy
mgradm-bash-completion
mgrctl-debuginfo
mgrpxy-zsh-completion
mgrctl-lang
mgrctl-zsh-completion
mgradm-lang
mgrpxy-lang
mgrctl-bash-completion
mgrpxy-bash-completion
mgradm-zsh-completion
Multi-Linux-Manager-Server-SLE-release
Multi-Linux-Manager-Retail-Branch-Server-SLE-release
Multi-Linux-Manager-Proxy-SLE-release

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

ognl - update to 3.4.7-150200.5.3.1
ognl-javadoc - update to 3.4.7-150200.5.3.1
mybatis - update to 3.5.19-150200.5.9.1
mybatis-javadoc - update to 3.5.19-150200.5.9.1
release-notes-susemanager-proxy - update to 4.3.16.1-150400.3.101.2
release-notes-susemanager - update to 4.3.16.1-150400.3.143.2
suse-manager-5.0-ppc64le-server-hub-xmlrpc-api-image - update to 5.0.5.1-6.24.9
suse-manager-5.0-aarch64-server-hub-xmlrpc-api-image - update to 5.0.5.1-6.24.9
suse-manager-5.0-x86_64-server-hub-xmlrpc-api-image - update to 5.0.5.1-6.24.9
suse-manager-5.0-s390x-server-hub-xmlrpc-api-image - update to 5.0.5.1-6.24.9
suse-manager-5.0-ppc64le-server-attestation-image - update to 5.0.5.1-6.28.7
suse-manager-5.0-aarch64-server-attestation-image - update to 5.0.5.1-6.28.7
suse-manager-5.0-s390x-server-attestation-image - update to 5.0.5.1-6.28.7
suse-manager-5.0-x86_64-server-attestation-image - update to 5.0.5.1-6.28.7
suse-manager-5.0-s390x-proxy-squid-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-s390x-proxy-ssh-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-ppc64le-proxy-tftpd-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-s390x-proxy-tftpd-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-x86_64-proxy-ssh-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-x86_64-proxy-tftpd-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-ppc64le-proxy-ssh-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-x86_64-proxy-squid-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-ppc64le-proxy-squid-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-aarch64-proxy-ssh-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-aarch64-proxy-squid-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-aarch64-proxy-tftpd-image - update to 5.0.5.1-7.24.7
suse-manager-5.0-x86_64-server-migration-14-16-image - update to 5.0.5.1-7.24.12
suse-manager-5.0-s390x-server-migration-14-16-image - update to 5.0.5.1-7.24.12
suse-manager-5.0-ppc64le-server-migration-14-16-image - update to 5.0.5.1-7.24.12
suse-manager-5.0-aarch64-server-migration-14-16-image - update to 5.0.5.1-7.24.12
suse-manager-5.0-x86_64-proxy-httpd-image - update to 5.0.5.1-7.24.21
suse-manager-5.0-s390x-proxy-httpd-image - update to 5.0.5.1-7.24.21
suse-manager-5.0-ppc64le-proxy-httpd-image - update to 5.0.5.1-7.24.21
suse-manager-5.0-aarch64-proxy-httpd-image - update to 5.0.5.1-7.24.21
suse-manager-5.0-x86_64-proxy-salt-broker-image - update to 5.0.5.1-7.26.21
suse-manager-5.0-s390x-proxy-salt-broker-image - update to 5.0.5.1-7.26.21
suse-manager-5.0-ppc64le-proxy-salt-broker-image - update to 5.0.5.1-7.26.21
suse-manager-5.0-aarch64-proxy-salt-broker-image - update to 5.0.5.1-7.26.21
suse-manager-5.0-aarch64-server-image - update to 5.0.5.1-7.31.17
suse-manager-5.0-s390x-server-image - update to 5.0.5.1-7.31.17
suse-manager-5.0-x86_64-server-image - update to 5.0.5.1-7.31.17
suse-manager-5.0-ppc64le-server-image - update to 5.0.5.1-7.31.17
suse-multi-linux-manager-5.1-s390x-server-postgresql-image - update to 5.1.1-6.5.7
suse-multi-linux-manager-5.1-aarch64-server-postgresql-image - update to 5.1.1-6.5.7
suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image - update to 5.1.1-6.5.7
suse-multi-linux-manager-5.1-x86_64-server-postgresql-image - update to 5.1.1-6.5.7
suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-s390x-proxy-squid-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-s390x-proxy-ssh-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-x86_64-proxy-squid-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-aarch64-proxy-squid-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image - update to 5.1.1-8.5.20
suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image - update to 5.1.1-8.5.25
suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image - update to 5.1.1-8.5.25
suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image - update to 5.1.1-8.5.25
suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image - update to 5.1.1-8.5.25
suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image - update to 5.1.1-8.5.38
suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image - update to 5.1.1-8.5.38
suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image - update to 5.1.1-8.5.38
suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image - update to 5.1.1-8.5.38
suse-multi-linux-manager-5.1-s390x-server-image - update to 5.1.1-8.5.61
suse-multi-linux-manager-5.1-aarch64-server-image - update to 5.1.1-8.5.61
suse-multi-linux-manager-5.1-ppc64le-server-image - update to 5.1.1-8.5.61
suse-multi-linux-manager-5.1-x86_64-server-image - update to 5.1.1-8.5.61
suse-multi-linux-manager-5.1-x86_64-server-attestation-image - update to 5.1.1-8.7.15
suse-multi-linux-manager-5.1-s390x-server-attestation-image - update to 5.1.1-8.7.15
suse-multi-linux-manager-5.1-ppc64le-server-attestation-image - update to 5.1.1-8.7.15
suse-multi-linux-manager-5.1-aarch64-server-attestation-image - update to 5.1.1-8.7.15
suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image - update to 5.1.1-8.7.30
suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image - update to 5.1.1-8.7.30
suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image - update to 5.1.1-8.7.30
suse-multi-linux-manager-5.1-s390x-proxy-httpd-image - update to 5.1.1-8.7.30
suse-multi-linux-manager-5.1-s390x-server-saline-image - update to 5.1.1-9.5.35
suse-multi-linux-manager-5.1-ppc64le-server-saline-image - update to 5.1.1-9.5.35
suse-multi-linux-manager-5.1-x86_64-server-saline-image - update to 5.1.1-9.5.35
suse-multi-linux-manager-5.1-aarch64-server-saline-image - update to 5.1.1-9.5.35
suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image - update to 5.1.1-9.5.45
suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image - update to 5.1.1-9.5.45
suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image - update to 5.1.1-9.5.45
suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image - update to 5.1.1-9.5.45
mgrctl - update to 5.1.22-150700.3.7.4
mgrpxy-debuginfo - update to 5.1.22-150700.3.7.4
mgradm - update to 5.1.22-150700.3.7.4
mgradm-debuginfo - update to 5.1.22-150700.3.7.4
mgrpxy - update to 5.1.22-150700.3.7.4
mgradm-bash-completion - update to 5.1.22-150700.3.7.4
mgrctl-debuginfo - update to 5.1.22-150700.3.7.4
mgrpxy-zsh-completion - update to 5.1.22-150700.3.7.4
mgrctl-lang - update to 5.1.22-150700.3.7.4
mgrctl-zsh-completion - update to 5.1.22-150700.3.7.4
mgradm-lang - update to 5.1.22-150700.3.7.4
mgrpxy-lang - update to 5.1.22-150700.3.7.4
mgrctl-bash-completion - update to 5.1.22-150700.3.7.4
mgrpxy-bash-completion - update to 5.1.22-150700.3.7.4
mgradm-zsh-completion - update to 5.1.22-150700.3.7.4
Multi-Linux-Manager-Server-SLE-release - update to 5.1-150700.16.3.6
Multi-Linux-Manager-Retail-Branch-Server-SLE-release - update to 5.1-150700.16.3.6
Multi-Linux-Manager-Proxy-SLE-release - update to 5.1-150700.16.3.6

• https://lists.apache.org/thread/2gj8tjl6vz949nnp3yxz3okm9xz2k7sp

• Remote code execution in Apache Commons OGNL
• SUSE update for mybatis, ognl
• SUSE update for Security update 5.0.5.1 for for Multi-Linux Manager
• SUSE update for Maintenance update for Multi-Linux Manager 4.3 LTS Release Notes Release Notes
• SUSE update for Maintenance update for Multi-Linux Manager 5.1.1