GCVE - cpe:2.3:a:suse:manager_server:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:suse:manager_server:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Suse (`ec535637-432e-5a38-96dd-4ec1e0138f73`)
Product	Manager Server (`72247616-5645-583e-9efb-928df9e97107`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-29552`	vulnerable	2026-06-08 06:02:40.503957	Details available The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor. Published: 2023-04-25T00:00:00.000Z Updated: 2025-10-21T23:05:48.255Z Open on db.gcve.eu Reference links https://datatracker.ietf.org/doc/html/rfc2608 https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks https://www.suse.com/support/kb/doc/?id=000021051	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3654`	vulnerable	2026-06-08 05:05:42.185106	Details available Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do. Published: 2014-11-03T16:00:00.000Z Updated: 2024-08-06T10:50:17.951Z Open on db.gcve.eu Reference links http://secunia.com/advisories/60976 http://secunia.com/advisories/62027 http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00010.html http://rhn.redhat.com/errata/RHSA-2014-1762.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3595`	vulnerable	2026-06-08 05:05:33.661547	Details available Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging. Published: 2014-09-22T15:00:00.000Z Updated: 2024-08-06T10:50:17.708Z Open on db.gcve.eu Reference links http://secunia.com/advisories/62027 http://rhn.redhat.com/errata/RHSA-2014-1184.html http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00031.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00009.html http://secunia.com/advisories/61115	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.