Novell Suse Manager vulnerabilities

6 CVEs affecting Novell Suse Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4957, published 2016-07-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-4957, published 2016-07-05. High severity, CVSS 7.5. EPSS: 44.9% chance of exploitation in the next 30 days. ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.
CVE-2016-4956, published 2016-07-05. Medium severity, CVSS 5.3. EPSS: 16.4% chance of exploitation in the next 30 days. ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists…
CVE-2016-4955, published 2016-07-05. Medium severity, CVSS 5.9. EPSS: 8.8% chance of exploitation in the next 30 days. ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK…
CVE-2016-0376, published 2016-06-03. High severity, CVSS 8.1. EPSS: 5.7% chance of exploitation in the next 30 days. The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40…
CVE-2016-0363, published 2016-06-03. High severity, CVSS 8.1. EPSS: 4% chance of exploitation in the next 30 days. The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40…
CVE-2012-0414, published 2013-12-02. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Spacewalk service in SUSE Manager 1.2 for SUSE Linux Enterprise (SLE) 11 SP1 allows remote attackers to inject arbitrary web script or HTML via an…