CVE catalog

CVE-2014-5326

Security update for SUSE Manager Server 3.1

[CVE catalog]

Severity
Medium · CVSS 4.7CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.15% · Oct 25, 2026

This update for dwr fixes the following issues: Security issue fixed: - CVE-2014-5326: Fix cross-site scripting (XSS) vulnerability (bsc#1085650).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susedwrmanager server 3.13.0rc2+svn4059-0.12.3.10fixed
Susedwrmanager server 3.03.0rc2+svn4059-0.12.3.1fixed
Susecobblermanager server 3.12.6.6-5.10.4fixed
Susegoogle-gsonmanager server 3.12.8.2-3.3.6fixed
Susepatterns-suse-managermanager server 3.13.1-3.3.2fixed
Suseprometheus-client-javamanager server 3.10.3.0-1.3.5fixed
Susepy26-compat-saltmanager server 3.12016.11.4-1.7.2fixed
Susesalt-netapi-clientmanager server 3.10.14.0-3.9.5fixed
Susespacewalk-backendmanager server 3.12.7.73.13-2.19.5fixed
Susespacewalk-brandingmanager server 3.12.7.2.13-2.19.5fixed
Susespacewalk-certs-toolsmanager server 3.12.7.0.10-2.12.4fixed
Susespacewalk-javamanager server 3.12.7.46.14-2.25.1fixed
Susespacewalk-utilsmanager server 3.12.7.10.7-2.10.4fixed
Susespacewalk-webmanager server 3.12.7.1.16-2.19.5fixed
Susesusemanagermanager server 3.13.1.14-2.19.5fixed
Susesusemanager-docs_enmanager server 3.13.1-10.20.7fixed
Susesusemanager-frontend-libsmanager server 3.13.1.1-3.3.2fixed
Susesusemanager-schemamanager server 3.13.1.17-2.23.3fixed
Susesusemanager-slsmanager server 3.13.1.17-2.23.2fixed
Susesusemanager-sync-datamanager server 3.13.1.14-2.23.2fixed
Susesusemanager-tftpsyncmanager server 3.13.1.3-3.6.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susedwrrpmmanager server 3.13.0rc2+svn4059-0.12.3.10Not reportedSUSE-SU-2018:1743-1Not reported
Susedwrrpmmanager server 3.03.0rc2+svn4059-0.12.3.1Not reportedSUSE-SU-2018:1745-1Not reported
Susecobblerrpmmanager server 3.12.6.6-5.10.4Not reportedSUSE-SU-2018:1751-1Not reported
Susegoogle-gsonrpmmanager server 3.12.8.2-3.3.6Not reportedSUSE-SU-2018:1751-1Not reported
Susepatterns-suse-managerrpmmanager server 3.13.1-3.3.2Not reportedSUSE-SU-2018:1751-1Not reported
Suseprometheus-client-javarpmmanager server 3.10.3.0-1.3.5Not reportedSUSE-SU-2018:1751-1Not reported
Susepy26-compat-saltrpmmanager server 3.12016.11.4-1.7.2Not reportedSUSE-SU-2018:1751-1Not reported
Susesalt-netapi-clientrpmmanager server 3.10.14.0-3.9.5Not reportedSUSE-SU-2018:1751-1Not reported
Susespacewalk-backendrpmmanager server 3.12.7.73.13-2.19.5Not reportedSUSE-SU-2018:1751-1Not reported
Susespacewalk-brandingrpmmanager server 3.12.7.2.13-2.19.5Not reportedSUSE-SU-2018:1751-1Not reported
Susespacewalk-certs-toolsrpmmanager server 3.12.7.0.10-2.12.4Not reportedSUSE-SU-2018:1751-1Not reported
Susespacewalk-javarpmmanager server 3.12.7.46.14-2.25.1Not reportedSUSE-SU-2018:1751-1Not reported
Susespacewalk-utilsrpmmanager server 3.12.7.10.7-2.10.4Not reportedSUSE-SU-2018:1751-1Not reported
Susespacewalk-webrpmmanager server 3.12.7.1.16-2.19.5Not reportedSUSE-SU-2018:1751-1Not reported
Susesusemanagerrpmmanager server 3.13.1.14-2.19.5Not reportedSUSE-SU-2018:1751-1Not reported
Susesusemanager-docs_enrpmmanager server 3.13.1-10.20.7Not reportedSUSE-SU-2018:1751-1Not reported
Susesusemanager-frontend-libsrpmmanager server 3.13.1.1-3.3.2Not reportedSUSE-SU-2018:1751-1Not reported
Susesusemanager-schemarpmmanager server 3.13.1.17-2.23.3Not reportedSUSE-SU-2018:1751-1Not reported
Susesusemanager-slsrpmmanager server 3.13.1.17-2.23.2Not reportedSUSE-SU-2018:1751-1Not reported
Susesusemanager-sync-datarpmmanager server 3.13.1.14-2.23.2Not reportedSUSE-SU-2018:1751-1Not reported
Susesusemanager-tftpsyncrpmmanager server 3.13.1.3-3.6.2Not reportedSUSE-SU-2018:1751-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]