Description
A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x86_64/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manager Server LTS 4.3: from ? before 4.3.88-150400.3.113.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | Container suse manager 5.0 | < 5.0.28-150600.3.36.8 | 5.0.28-150600.3.36.8 |
| SUSE | SUSE Manager Server LTS 4.3 | < 4.3.88-150400.3.113.5 | 4.3.88-150400.3.113.5 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Manager Server LTS 4.3 | release-notes-susemanager | 4.3.16.1-150400.3.143.2 | SUSE-SU-2025:3827-1 |
| SUSE Manager Server LTS 4.3 | rhnlib | 4.3.7-150400.3.9.4 | SUSE-SU-2025:3826-1 |
| SUSE Manager Server LTS 4.3 | spacewalk-backend | 4.3.34-150400.3.58.6 | SUSE-SU-2025:3826-1 |
| SUSE Manager Server LTS 4.3 | spacewalk-java | 4.3.88-150400.3.113.5 | SUSE-SU-2025:3826-1 |
| SUSE Manager Server LTS 4.3 | spacewalk-web | 4.3.46-150400.3.63.5 | SUSE-SU-2025:3826-1 |
| SUSE Manager Server LTS 4.3 | susemanager-build-keys | 15.4.11-150400.3.38.1 | SUSE-SU-2025:3826-1 |
| SUSE Manager Server LTS 4.3 | susemanager-sls | 4.3.50-150400.3.68.1 | SUSE-SU-2025:3826-1 |
| SUSE Manager Proxy LTS 4.3 | release-notes-susemanager-proxy | 4.3.16.1-150400.3.101.2 | SUSE-SU-2025:3827-1 |
| SUSE Manager Proxy LTS 4.3 | rhnlib | 4.3.7-150400.3.9.4 | SUSE-SU-2025:3826-1 |
| SUSE Manager Proxy LTS 4.3 | spacewalk-backend | 4.3.34-150400.3.58.6 | SUSE-SU-2025:3826-1 |
| SUSE Manager Proxy LTS 4.3 | spacewalk-web | 4.3.46-150400.3.63.5 | SUSE-SU-2025:3826-1 |
| SUSE Manager Proxy LTS 4.3 | susemanager-build-keys | 15.4.11-150400.3.38.1 | SUSE-SU-2025:3826-1 |
| SUSE Manager Proxy LTS 4.3 | susemanager-tftpsync-recv | 4.3.11-150400.3.15.3 | SUSE-SU-2025:3826-1 |
Advisories 2
- SUSE-SU-2025:3827-1 Security update 4.3.16.1 for SUSE Manager Server Release Notes SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:3826-1 Security update 4.3.16.1 for SUSE Manager Server 4.3 LTS SUSE / openSUSE Security Updates · Oct 28, 2025