SUSE Studio Extension For System Z vulnerabilities

5 vulnerabilities

Known vulnerabilities in SUSE Studio Extension For System Z, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2013-3712susestudio_extension_for_system_z+1
EPSS score
1.37%
SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static" secret tokens, which has unspecified impact and vectors.7.5CVE-2011-4192susekiwi+2
EPSS score
1.50%
kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double quotes in kiwi_oemtitle of .profile."4.3CVE-2011-4193susestudio_extension_for_system_z+1
EPSS score
0.94%
Cross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted application, related to cloning.7.5CVE-2011-4195susekiwi+2
EPSS score
1.88%
kiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in an image name.7.5CVE-2011-3180susekiwi+2
EPSS score
2.58%
kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to chown.