SUSE Manager Server LTS 4.3 vulnerabilities

2 known vulnerabilities in SUSE Manager Server LTS 4.3 from SUSE. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Container suse/sle-micro-rancher/5.3:latest: Authentication Bypass by Primary Weakness

  CVE-2026-41054May 20, 2026SUSE

  In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASC

• 9.3 Critical severity

  Container suse manager 5.0: Improper Neutralization of Script-Related HTML Tags in a Web Page

  CVE-2025-53883Oct 30, 2025SUSE

  A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x86_64/server:latest: from ?