What’s Vulnerable › Products

SUSE Manager Server Module 4.3 vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your SUSE Manager Server Module 4.3 version is affected

Latest SUSE Manager Server Module 4.3 vulnerabilities

• CVE-2025-46809 — Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs (CVSS 5.7)
• CVE-2025-46811 — SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint (CVSS 9.8)
• CVE-2025-23393 — Reflected XSS in spacewalk-java (CVSS 5.2)
• CVE-2025-23392 — Reflected XSS in SystemsController.java in spacewalk-java (CVSS 5.2)
• CVE-2024-49503 — Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web (CVSS 3.5)
• CVE-2024-49502 — Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web (CVSS 3.5)
• CVE-2023-32189 — Insecure handling SSH key in SUSE Manager when bootstrapping new clients (CVSS 5.9)