SUSE Studio onsite vulnerabilities

22 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Exploited SUSE Studio onsite vulnerabilities

CVE-2014-7169 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
CVE-2014-6271 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

CVE-2017-14807 — SQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsite (CVSS 8.1)
CVE-2017-14806 — Insecure handling of repodata and packages in SUSE Studio onlite (CVSS 5.9)
CVE-2011-0467 — SQL injection in SUSE studio via select parameter (CVSS 8.8)
CVE-2014-9846 — (CVSS 9.8)
CVE-2014-9845 — (CVSS 5.5)
CVE-2014-9844 — (CVSS 5.5)
CVE-2016-2318 — (CVSS 5.5)
CVE-2016-2317 — (CVSS 5.5)
CVE-2015-8808 — (CVSS 5.5)
CVE-2016-5118 — (CVSS 9.8)
CVE-2016-0718 — (CVSS 9.8)
CVE-2015-1283 — (CVSS 6.8)
CVE-2014-7169 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2014-6271 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2011-4195 — (CVSS 7.5)
CVE-2011-4193 — (CVSS 4.3)
CVE-2011-4192 — (CVSS 7.5)
CVE-2011-3180 — (CVSS 7.5)
CVE-2013-3712 — (CVSS 10.0)
CVE-2013-3709 — (CVSS 7.2)
CVE-2013-4547 — (CVSS 7.5)
CVE-2011-4315 — (CVSS 6.8)