GCVE - cpe:2.3:o:novell:suse_linux:11:-:enterprise:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:novell:suse_linux:11:-:enterprise:*:*:*:*:*

part: o version: 11 update: -

Vendor	Novell (`4a1c187d-e568-531f-92b0-685a3df2807c`)
Product	Suse Linux (`791c6fb6-7c33-5efb-b5d1-329f415aeaab`)
Edition	enterprise
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1507`	vulnerable	2026-06-08 04:54:08.505876	Details available WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by leveraging knowledge of this key. Published: 2010-09-03T19:00:00.000Z Updated: 2024-09-16T17:08:35.595Z Open on db.gcve.eu Reference links https://bugzilla.novell.com/show_bug.cgi?id=591345 http://support.novell.com/security/cve/CVE-2010-1507.html http://www.securityfocus.com/bid/42128 http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html https://bugzilla.novell.com/show_bug.cgi?id=598834	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1325`	not_vulnerable	2026-06-08 04:54:07.223463	Details available Cross-site request forgery (CSRF) vulnerability in the apache2-slms package in SUSE Lifecycle Management Server (SLMS) 1.0 on SUSE Linux Enterprise (SLE) 11 allows remote attackers to hijack the authentication of unspecified victims via vectors related to improper parameter quoting. NOTE: some sources report that this is a vulnerability in a product named "Apache SLMS," but that is incorrect. Published: 2010-09-03T19:00:00.000Z Updated: 2024-08-07T01:21:18.670Z Open on db.gcve.eu Reference links https://bugzilla.novell.com/show_bug.cgi?id=588284 http://www.securityfocus.com/bid/42121 http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html http://support.novell.com/security/cve/CVE-2010-1325.html https://exchange.xforce.ibmcloud.com/vulnerabilities/61006	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1297`	vulnerable	2026-06-08 04:51:14.382188	Details available iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name. Published: 2009-10-23T18:00:00.000Z Updated: 2024-08-07T05:04:49.435Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2013:109 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0241 http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2025`	not_vulnerable	2026-06-08 04:50:22.676759	Details available Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "insufficient quoting of parameters." Published: 2009-04-09T15:00:00.000Z Updated: 2024-08-07T08:41:00.257Z Open on db.gcve.eu Reference links http://secunia.com/advisories/34567 http://download.opensuse.org/update/10.3-test/repodata/patch-struts-5872.xml http://secunia.com/advisories/34642 http://support.novell.com/security/cve/CVE-2008-2025.html http://osvdb.org/53380	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.