SUSE Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

Rancher67 vulnerabilities
SUSE Linux Enterprise Server 1513 vulnerabilities
SUSE Linux Enterprise Server 1212 vulnerabilities
openSUSE Tumbleweed11 vulnerabilities
neuvector10 vulnerabilities
SUSE Linux Enterprise Server for SAP 158 vulnerabilities
libzypp7 vulnerabilities
SUSE Linux Enterprise Server 15-LTSS7 vulnerabilities
SUSE Manager Server Module 4.37 vulnerabilities
open build service5 vulnerabilities
openSUSE Factory5 vulnerabilities
supportutils5 vulnerabilities
SUSE Linux Enterprise Software Development Kit 12-SP45 vulnerabilities
SUSE Linux Enterprise Software Development Kit 12-SP55 vulnerabilities
SUSE Manager Server 4.25 vulnerabilities
openSUSE Leap 15.54 vulnerabilities
SUSE Linux Enterprise Server 114 vulnerabilities
SUSE Linux Enterprise Server 11-SP4-LTSS4 vulnerabilities
SUSE Linux Enterprise Server 12-SP54 vulnerabilities
SUSE Linux Enterprise Server for SAP Applications 15 SP64 vulnerabilities
SUSE Manager Server 4.04 vulnerabilities
SUSE OpenStack Cloud 84 vulnerabilities
harvester3 vulnerabilities
opensuse_tumbleweed3 vulnerabilities
SUSE Linux Enterprise High Performance Computing 15 SP53 vulnerabilities

SUSE vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2021-25315CRITICAL	salt-api unauthenticated remote code execution CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002… CWE-287 CWE-303Mar 3, 2021	CVSS9.8v3.1	EPSS2.33%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX