Approved changes feed: RSS · Atom

cpe:2.3:a:suse_linux:smt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSuse Linux (79a14b54-d61e-5112-8735-596bf477a2c7)
ProductSmt (c4024326-f09a-549a-8312-52133754022f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-12472 vulnerable 2026-06-03 14:38:04.409306 Authentication bypass in sibling check
HIGH (7.3)
A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.
Published: 2018-10-04T14:00:00.000Z
Updated: 2024-09-16T23:31:29.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12471 vulnerable 2026-06-03 14:38:04.408950 External Entity processing in the RegistrationSharing module
MEDIUM (6.5)
A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.
Published: 2018-10-04T14:00:00.000Z
Updated: 2024-09-17T01:50:45.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12470 vulnerable 2026-06-03 14:38:04.407980 SQL injection in RegistrationSharing module
CRITICAL (9.8)
A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary SQL statements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.
Published: 2018-10-04T14:00:00.000Z
Updated: 2024-09-16T18:28:50.344Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.