Skip to content
OpenAdvisories

Vendor

SUSE

253 known vulnerabilities.

Products

Rancher 86 NeuVector 14 SUSE Linux Enterprise Server 15 13 SUSE Linux Enterprise Server 12 12 openSUSE Tumbleweed 11 SUSE Linux Enterprise Server for SAP 15 8 SUSE Manager Server Module 4.3 7 libzypp 7 SUSE Linux Enterprise Server 15-LTSS 7 SUSE Linux Enterprise Software Development Kit 12-SP5 6 SUSE Manager Server 4.2 5 SUSE Linux Enterprise Server 12-SP5 5 supportutils 5 open build service 5 openSUSE Factory 5 SUSE Linux Enterprise Software Development Kit 12-SP4 5 SUSE Linux Enterprise Server 11 4 SUSE Linux Enterprise Server for SAP Applications 15 SP6 4 openSUSE Leap 15.5 4 SUSE Openstack Cloud 8 4 SUSE Linux Enterprise Server 11-SP4-LTSS 4 SUSE Manager Server 4.0 4 SUSE Linux Enterprise Module for SUSE Manager Server 4.2 3 SUSE Linux Enterprise Module for SUSE Manager Server 4.3 3 SUSE Linux Enterprise Server 12-SP4 3 SUSE Manager Server 4.1 3 SUSE OpenStack Cloud 7 3 SUSE Linux Enterprise Server for SAP Applications 15 SP5 3 SUSE OpenStack Cloud Crowbar 8 3 SUSE Linux Enterprise High Performance Computing 15 SP5 3 wicked 3 SUSE Linux Enterprise High Performance Computing 15-ESPOS 3 SUSE Linux Enterprise High Performance Computing 15-LTSS 3 SUSE Linux Enterprise Module for Development Tools 15 3 SUSE OpenStack Cloud Crowbar 9 3 SUSE Linux Enterprise Server 15 SP6 3 SUSE Linux Enterprise High Performance Computing 15 SP6 3 Harvester 3 SUSE Linux Enterprise Server 15 SP1 3 Image SLES15-SP6-SAP-Hardened-Azure 2
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-104623 Public exploit

    Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

    A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible olde…

    SUSE Rancher
  • Critical 9.6
    CVE-2026-88804 Public exploit

    Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

    An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 befo…

    SUSE Rancher
  • Critical 9.9
    CVE-2025-62878 Public exploit

    Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

    A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.

    SUSE Rancher github.com/rancher/local-path-provisioner Go
  • Critical 9.8
    CVE-2025-46811 Public exploit EPSS 14%

    SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint

    A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from …

    SUSE SUSE Manager Server Module 4.3 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1
  • Critical 9.9
    CVE-2021-36782 Public exploit

    Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object

    A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to use the Kubernetes API to retrieve plaintext version of sensitive data. This issu…

    SUSE Rancher github.com/rancher/rancher Go
  • High 8.0
    CVE-2019-10220 Public exploit

    Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.

    SUSE kernel: linux-raspi2 linux-hwe Debian Ubuntu
  • High 7.3
    CVE-2017-14798 Public exploit

    local privilege escalation in SUSE postgresql init script

    A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.

    SUSE postgresql-init