Studio Onsite
Approved changes feed: RSS · Atom
cpe:2.3:a:suse:studio_onsite:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Suse (ec535637-432e-5a38-96dd-4ec1e0138f73) |
|---|---|
| Product | Studio Onsite (ca68d44b-f5c8-51d1-8e22-659713b62c52) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-14807 |
vulnerable | 2026-06-08 05:08:57.472497 |
SQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsite
HIGH (8.1)
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with admin privileges in Studio to alter SQL statements, allowing for extraction and modification of data. This issue affects: SUSE Studio onsite susestudio-ui-server version 1.3.17-56.6.3 and prior versions.
Published: 2020-01-27T09:45:16.257Z
Updated: 2024-09-17T02:27:16.714Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14806 |
vulnerable | 2026-06-08 05:08:57.470753 |
Insecure handling of repodata and packages in SUSE Studio onlite
LOW (3.7)
A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version 1.3.17-56.6.3 and prior versions.
Published: 2020-01-27T09:45:15.863Z
Updated: 2024-09-16T16:48:59.649Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0467 |
vulnerable | 2026-06-08 04:56:37.448600 |
SQL injection in SUSE studio via select parameter
HIGH (8.8)
A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE Studio Onsite: versions prior to 1.0.3-0.18.1, SUSE Studio Onsite 1.1 Appliance: versions prior to 1.1.2-0.25.1.
Published: 2018-06-07T21:00:00.000Z
Updated: 2024-09-17T01:16:48.332Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.