SUSE-SU-2025:4444-1: grafana&distro=SUSE Multi Linux Manager Tools SLE-12 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 18-12-2025Last modified 23-03-2026

Vulnerability summary

SUSE-SU-2025:4444-1 is a vulnerability in grafana&distro=SUSE Multi Linux Manager Tools SLE-12 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0 · Related 4

Timeline

  1. 18-12-2025
    PublishedVulnerability first disclosed.
  2. 23-03-2026
    Last modifiedVulnerability information updated.

Description

Security update 5.1.1.1 for Multi-Linux Manager Client Tools This update fixes the following issues: grafana was updated from version 11.5.7 to 11.5.10: - Security issues fixed: * CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client (version 11.5.10) (bsc#1254113) * CVE-2025-47911: Fixed parsing HTML documents (version 11.5.10) (bsc#1251454) * CVE-2025-58190: Fixed excessive memory consumption (version 11.5.10) (bsc#1251657) * CVE-2025-11065: Fixed sensitive information leak in logs (version 11.5.9) (bsc#1250616) - Other changes, new features and bugs fixed: * Version 11.5.10: + Use forked wire from Grafana repository instead of external package (jsc#PED-14178) + Auth: Fix render user OAuth passthrough. + LDAP Authentication: Fix URL to propagate username context as parameter. + Plugins: Dependencies do not inherit parent URL for preinstall. * Version 11.5.9: + Auditing: Document new options for recording datasource query request/response body. + Login: Fixed redirection after login when Grafana is served from subpath. * Update to version 11.5.8: + No relevant changes uyuni-tools: - version 5.1.23-0 * Update the default tag to 5.1.1.1 - version 5.1.22-0 * Fix cobbler config migration to standalone files * Fix generated DB certificate subject alternate names - version 5.1.21-0 * Remove extraneous quotes when getting the running image (bsc#1249434)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse3 products
  • grafana&distro=SUSE Multi Linux Manager Tools SLE-12< 11.5.10-120002.4.6.1
  • Multi-Linux-ManagerTools-SLE-release&distro=SUSE Multi Linux Manager Tools SLE-12< 12-120002.1.11.1
  • uyuni-tools&distro=SUSE Multi Linux Manager Tools SLE-12< 5.1.23-120002.3.6.1

1 vendor · 3 products

References

10 links