CVE-2022-43754
Fixed in a distro release EPSS <1%CVSS 2.6
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to embed Javascript code via /rhn/audit/scap/Search.do This issue affects: SUSE Linux Enterprise Module for SUSE Manager Server 4.2 hub-xmlrpc-api-0.7-150300.3.9.2, inter-server-sync-0.2.4-150300.8.25.2, locale-formula-0.3-150300.3.3.2, py27-compat-salt-3000.3-150300.7.7.26.2, python-urlgrabber-3.10.2.1py2_3-150300.3.3.2, spacecmd-4.2.20-150300.4.30.2, spacewalk-backend-4.2.25-150300.4.32.4, spacewalk-client-tools-4.2.21-150300.4.27.3, spacewalk-java-4.2.43-150300.3.48.2, spacewalk-utils-4.2.18-150300.3.21.2, spacewalk-web-4.2.30-150300.3.30.3, susemanager-4.2.38-150300.3.44.3, susemanager-doc-indexes-4.2-150300.12.36.3, susemanager-docs_en-4.2-150300.12.36.2, susemanager-schema-4.2.25-150300.3.30.3, susemanager-sls versions prior to 4.2.28. SUSE Linux Enterprise Module for SUSE Manager Server 4.3 spacewalk-java versions prior to 4.3.39. SUSE Manager Server 4.2 release-notes-susemanager versions prior to 4.2.10.
Products: SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Manager Proxy 4.2 | release-notes-susemanager-proxy | 4.2.10-150300.3.46.1 |
| SUSE Manager Retail Branch Server 4.2 | release-notes-susemanager-proxy | 4.2.10-150300.3.46.1 |
| SUSE Manager Server 4.2 | release-notes-susemanager | 4.2.10-150300.3.57.1 |
| SUSE Manager Server Module 4.2 | hub-xmlrpc-api | 0.7-150300.3.9.2 |
| SUSE Manager Server Module 4.2 | inter-server-sync | 0.2.4-150300.8.25.2 |
| SUSE Manager Server Module 4.2 | locale-formula | 0.3-150300.3.3.2 |
| SUSE Manager Server Module 4.2 | py27-compat-salt | 3000.3-150300.7.7.26.2 |
| SUSE Manager Server Module 4.2 | python-urlgrabber | 3.10.2.1py2_3-150300.3.3.2 |
| SUSE Manager Server Module 4.2 | spacecmd | 4.2.20-150300.4.30.2 |
| SUSE Manager Server Module 4.2 | spacewalk-backend | 4.2.25-150300.4.32.4 |
| SUSE Manager Server Module 4.2 | spacewalk-client-tools | 4.2.21-150300.4.27.3 |
| SUSE Manager Server Module 4.2 | spacewalk-java | 4.2.43-150300.3.48.2 |
| SUSE Manager Server Module 4.2 | spacewalk-utils | 4.2.18-150300.3.21.2 |
| SUSE Manager Server Module 4.2 | spacewalk-web | 4.2.30-150300.3.30.3 |
| SUSE Manager Server Module 4.2 | susemanager | 4.2.38-150300.3.44.3 |
| SUSE Manager Server Module 4.2 | susemanager-doc-indexes | 4.2-150300.12.36.3 |
| SUSE Manager Server Module 4.2 | susemanager-docs_en | 4.2-150300.12.36.2 |
| SUSE Manager Server Module 4.2 | susemanager-schema | 4.2.25-150300.3.30.3 |
| SUSE Manager Server Module 4.2 | susemanager-sls | 4.2.28-150300.3.36.2 |
| SUSE Manager Server Module 4.3 | spacewalk-java | 4.3.39-150400.3.11.1 |