Suse Subscription Management Tool vulnerabilities

3 vulnerabilities

Known vulnerabilities in Suse Subscription Management Tool, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.1CVE-2018-12471suse linuxsmt+1
EPSS score
1.53%
A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.9.8CVE-2018-12470suse linuxsmt+1
EPSS score
1.99%
A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary SQL statements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.9.1CVE-2018-12472susesmt&distro=SUSE Enterprise Storage 4+11
EPSS score
1.53%
A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.