Susestudio Ui Server

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:suse:susestudio-ui-server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSuse (ec535637-432e-5a38-96dd-4ec1e0138f73)
ProductSusestudio Ui Server (db842beb-0709-59d6-b23f-8f9f40f287b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14807 vulnerable 2026-06-08 05:08:57.472560 SQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsite
HIGH (8.1)
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with admin privileges in Studio to alter SQL statements, allowing for extraction and modification of data. This issue affects: SUSE Studio onsite susestudio-ui-server version 1.3.17-56.6.3 and prior versions.
Published: 2020-01-27T09:45:16.257Z
Updated: 2024-09-17T02:27:16.714Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14806 vulnerable 2026-06-08 05:08:57.472079 Insecure handling of repodata and packages in SUSE Studio onlite
LOW (3.7)
A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version 1.3.17-56.6.3 and prior versions.
Published: 2020-01-27T09:45:15.863Z
Updated: 2024-09-16T16:48:59.649Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.