Suse Container suse/manager/5.0/x86 64/server:5.0.2.7.8.1 vulnerabilities

2 CVEs affecting Suse Container suse/manager/5.0/x86 64/server:5.0.2.7.8.1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-49503, published 2024-11-28.

More from Suse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-49503, published 2024-11-28. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SUSE manager allows attackers to execute Javascript code in the organization credentials…
• CVE-2024-49502, published 2024-11-28. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in the Setup Wizard, HTTP Proxy credentials pane in spacewalk-web allows attackers to…