CVE-2025-53883
Fixed in a distro release EPSS <1%CVSS 9.3
A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x86_64/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manager Server LTS 4.3: from ? before 4.3.88-150400.3.113.5.
Products: Container suse manager 5.0, SUSE Manager Server LTS 4.3
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Manager Proxy LTS 4.3 | release-notes-susemanager-proxy | 4.3.16.1-150400.3.101.2 |
| SUSE Manager Proxy LTS 4.3 | rhnlib | 4.3.7-150400.3.9.4 |
| SUSE Manager Proxy LTS 4.3 | spacewalk-backend | 4.3.34-150400.3.58.6 |
| SUSE Manager Proxy LTS 4.3 | spacewalk-web | 4.3.46-150400.3.63.5 |
| SUSE Manager Proxy LTS 4.3 | susemanager-build-keys | 15.4.11-150400.3.38.1 |
| SUSE Manager Proxy LTS 4.3 | susemanager-tftpsync-recv | 4.3.11-150400.3.15.3 |
| SUSE Manager Server LTS 4.3 | release-notes-susemanager | 4.3.16.1-150400.3.143.2 |
| SUSE Manager Server LTS 4.3 | rhnlib | 4.3.7-150400.3.9.4 |
| SUSE Manager Server LTS 4.3 | spacewalk-backend | 4.3.34-150400.3.58.6 |
| SUSE Manager Server LTS 4.3 | spacewalk-java | 4.3.88-150400.3.113.5 |
| SUSE Manager Server LTS 4.3 | spacewalk-web | 4.3.46-150400.3.63.5 |
| SUSE Manager Server LTS 4.3 | susemanager-build-keys | 15.4.11-150400.3.38.1 |
| SUSE Manager Server LTS 4.3 | susemanager-sls | 4.3.50-150400.3.68.1 |