Suse Image SLES15-SP4-Manager-Server-4-3-Byos vulnerabilities

2 CVEs affecting Suse Image SLES15-SP4-Manager-Server-4-3-Byos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-46809, published 2025-07-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-46811, published 2025-07-30. Critical severity, CVSS 9.8. EPSS: 10.9% chance of exploitation in the next 30 days. A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. This issue affects…
CVE-2025-46809, published 2025-07-31. Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days. A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1: from ?…