CVE catalog

CVE-2018-11761

Security update for SUSE Manager Server 3.2

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
9.38% · Oct 27, 2026

In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiantika111.20-1fixed
Susespacewalk-webmanager proxy 3.22.8.7.11-3.13.3fixed
Suseapache-mybatismanager server 3.23.2.3-3.3.3fixed
Susecobblermanager server 3.22.6.6-6.10.3fixed
Susehadoopmanager server 3.20.18.1-3.3.3fixed
Suseimage-sync-formulamanager server 3.20.1.1542287363.b8aa274-3.6.3fixed
Suselucenemanager server 3.22.4.1-4.3.3fixed
Susenekohtmlmanager server 3.21.9.21-3.3.3fixed
Susenutch-coremanager server 3.21.0.1-7.10.3fixed
Susepicocontainermanager server 3.21.3.7-3.3.3fixed
Susepython-susemanager-retailmanager server 3.21.0.1542643545.8752d17-2.6.3fixed
Susesalt-netapi-clientmanager server 3.20.15.0-4.3.3fixed
Susesaltboot-formulamanager server 3.20.1.1542287363.b8aa274-3.6.3fixed
Susespacecmdmanager server 3.22.8.25.7-3.9.3fixed
Susespacewalk-brandingmanager server 3.22.8.5.12-3.10.4fixed
Susespacewalk-configmanager server 3.22.8.5.5-3.10.3fixed
Susespacewalk-javamanager server 3.22.8.78.13-3.13.1fixed
Susespacewalk-searchmanager server 3.22.8.3.7-3.12.3fixed
Susespacewalk-setupmanager server 3.22.8.7.5-3.10.3fixed
Susespacewalk-utilsmanager server 3.22.8.18.3-3.3.3fixed
Susespacewalk-webmanager server 3.22.8.7.11-3.13.3fixed
Susesusemanagermanager server 3.23.2.14-3.13.3fixed
Susesusemanager-docs_enmanager server 3.23.2-11.12.3fixed
Susesusemanager-frontend-libsmanager server 3.23.2.4-3.7.3fixed
Susesusemanager-schemamanager server 3.23.2.15-3.13.3fixed
Susesusemanager-slsmanager server 3.23.2.18-3.13.3fixed
Susesusemanager-sync-datamanager server 3.23.2.10-3.9.3fixed
Susetika-coremanager server 3.21.19.1-3.3.3fixed
Susespacewalk-webmanager proxy 3.22.8.7.11-3.13.3fixed
Suseapache-mybatismanager server 3.23.2.3-3.3.3fixed
Susecobblermanager server 3.22.6.6-6.10.3fixed
Susehadoopmanager server 3.20.18.1-3.3.3fixed
Suseimage-sync-formulamanager server 3.20.1.1542287363.b8aa274-3.6.3fixed
Suselucenemanager server 3.22.4.1-4.3.3fixed
Susenekohtmlmanager server 3.21.9.21-3.3.3fixed
Susenutch-coremanager server 3.21.0.1-7.10.3fixed
Susepicocontainermanager server 3.21.3.7-3.3.3fixed
Susepython-susemanager-retailmanager server 3.21.0.1542643545.8752d17-2.6.3fixed
Susesalt-netapi-clientmanager server 3.20.15.0-4.3.3fixed
Susesaltboot-formulamanager server 3.20.1.1542287363.b8aa274-3.6.3fixed
Susespacecmdmanager server 3.22.8.25.7-3.9.3fixed
Susespacewalk-brandingmanager server 3.22.8.5.12-3.10.4fixed
Susespacewalk-configmanager server 3.22.8.5.5-3.10.3fixed
Susespacewalk-javamanager server 3.22.8.78.13-3.13.1fixed
Susespacewalk-searchmanager server 3.22.8.3.7-3.12.3fixed
Susespacewalk-setupmanager server 3.22.8.7.5-3.10.3fixed
Susespacewalk-utilsmanager server 3.22.8.18.3-3.3.3fixed
Susespacewalk-webmanager server 3.22.8.7.11-3.13.3fixed
Susesusemanagermanager server 3.23.2.14-3.13.3fixed
Susesusemanager-docs_enmanager server 3.23.2-11.12.3fixed
Susesusemanager-frontend-libsmanager server 3.23.2.4-3.7.3fixed
Susesusemanager-schemamanager server 3.23.2.15-3.13.3fixed
Susesusemanager-slsmanager server 3.23.2.18-3.13.3fixed
Susesusemanager-sync-datamanager server 3.23.2.10-3.9.3fixed
Susetika-coremanager server 3.21.19.1-3.3.3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiantikadeb111.20-1Not reportedDEBIAN-CVE-2018-11761Not reported
Susespacewalk-webrpmmanager proxy 3.22.8.7.11-3.13.3Not reportedSUSE-RU-2018:4018-1Not reported
Suseapache-mybatisrpmmanager server 3.23.2.3-3.3.3Not reportedSUSE-RU-2018:4018-1Not reported
Susecobblerrpmmanager server 3.22.6.6-6.10.3Not reportedSUSE-RU-2018:4018-1Not reported
Susehadooprpmmanager server 3.20.18.1-3.3.3Not reportedSUSE-RU-2018:4018-1Not reported
Suseimage-sync-formularpmmanager server 3.20.1.1542287363.b8aa274-3.6.3Not reportedSUSE-RU-2018:4018-1Not reported
Suselucenerpmmanager server 3.22.4.1-4.3.3Not reportedSUSE-RU-2018:4018-1Not reported
Susenekohtmlrpmmanager server 3.21.9.21-3.3.3Not reportedSUSE-RU-2018:4018-1Not reported
Susenutch-corerpmmanager server 3.21.0.1-7.10.3Not reportedSUSE-RU-2018:4018-1Not reported
Susepicocontainerrpmmanager server 3.21.3.7-3.3.3Not reportedSUSE-RU-2018:4018-1Not reported
Susepython-susemanager-retailrpmmanager server 3.21.0.1542643545.8752d17-2.6.3Not reportedSUSE-RU-2018:4018-1Not reported
Susesalt-netapi-clientrpmmanager server 3.20.15.0-4.3.3Not reportedSUSE-RU-2018:4018-1Not reported
Susesaltboot-formularpmmanager server 3.20.1.1542287363.b8aa274-3.6.3Not reportedSUSE-RU-2018:4018-1Not reported
Susespacecmdrpmmanager server 3.22.8.25.7-3.9.3Not reportedSUSE-RU-2018:4018-1Not reported
Susespacewalk-brandingrpmmanager server 3.22.8.5.12-3.10.4Not reportedSUSE-RU-2018:4018-1Not reported
Susespacewalk-configrpmmanager server 3.22.8.5.5-3.10.3Not reportedSUSE-RU-2018:4018-1Not reported
Susespacewalk-javarpmmanager server 3.22.8.78.13-3.13.1Not reportedSUSE-RU-2018:4018-1Not reported
Susespacewalk-searchrpmmanager server 3.22.8.3.7-3.12.3Not reportedSUSE-RU-2018:4018-1Not reported
Susespacewalk-setuprpmmanager server 3.22.8.7.5-3.10.3Not reportedSUSE-RU-2018:4018-1Not reported
Susespacewalk-utilsrpmmanager server 3.22.8.18.3-3.3.3Not reportedSUSE-RU-2018:4018-1Not reported
Susespacewalk-webrpmmanager server 3.22.8.7.11-3.13.3Not reportedSUSE-RU-2018:4018-1Not reported
Susesusemanagerrpmmanager server 3.23.2.14-3.13.3Not reportedSUSE-RU-2018:4018-1Not reported
Susesusemanager-docs_enrpmmanager server 3.23.2-11.12.3Not reportedSUSE-RU-2018:4018-1Not reported
Susesusemanager-frontend-libsrpmmanager server 3.23.2.4-3.7.3Not reportedSUSE-RU-2018:4018-1Not reported
Susesusemanager-schemarpmmanager server 3.23.2.15-3.13.3Not reportedSUSE-RU-2018:4018-1Not reported
Susesusemanager-slsrpmmanager server 3.23.2.18-3.13.3Not reportedSUSE-RU-2018:4018-1Not reported
Susesusemanager-sync-datarpmmanager server 3.23.2.10-3.9.3Not reportedSUSE-RU-2018:4018-1Not reported
Susetika-corerpmmanager server 3.21.19.1-3.3.3Not reportedSUSE-RU-2018:4018-1Not reported
Susespacewalk-webrpmmanager proxy 3.22.8.7.11-3.13.3Not reportedSUSE-SU-2018:4011-1Not reported
Suseapache-mybatisrpmmanager server 3.23.2.3-3.3.3Not reportedSUSE-SU-2018:4011-1Not reported
Susecobblerrpmmanager server 3.22.6.6-6.10.3Not reportedSUSE-SU-2018:4011-1Not reported
Susehadooprpmmanager server 3.20.18.1-3.3.3Not reportedSUSE-SU-2018:4011-1Not reported
Suseimage-sync-formularpmmanager server 3.20.1.1542287363.b8aa274-3.6.3Not reportedSUSE-SU-2018:4011-1Not reported
Suselucenerpmmanager server 3.22.4.1-4.3.3Not reportedSUSE-SU-2018:4011-1Not reported
Susenekohtmlrpmmanager server 3.21.9.21-3.3.3Not reportedSUSE-SU-2018:4011-1Not reported
Susenutch-corerpmmanager server 3.21.0.1-7.10.3Not reportedSUSE-SU-2018:4011-1Not reported
Susepicocontainerrpmmanager server 3.21.3.7-3.3.3Not reportedSUSE-SU-2018:4011-1Not reported
Susepython-susemanager-retailrpmmanager server 3.21.0.1542643545.8752d17-2.6.3Not reportedSUSE-SU-2018:4011-1Not reported
Susesalt-netapi-clientrpmmanager server 3.20.15.0-4.3.3Not reportedSUSE-SU-2018:4011-1Not reported
Susesaltboot-formularpmmanager server 3.20.1.1542287363.b8aa274-3.6.3Not reportedSUSE-SU-2018:4011-1Not reported
Susespacecmdrpmmanager server 3.22.8.25.7-3.9.3Not reportedSUSE-SU-2018:4011-1Not reported
Susespacewalk-brandingrpmmanager server 3.22.8.5.12-3.10.4Not reportedSUSE-SU-2018:4011-1Not reported
Susespacewalk-configrpmmanager server 3.22.8.5.5-3.10.3Not reportedSUSE-SU-2018:4011-1Not reported
Susespacewalk-javarpmmanager server 3.22.8.78.13-3.13.1Not reportedSUSE-SU-2018:4011-1Not reported
Susespacewalk-searchrpmmanager server 3.22.8.3.7-3.12.3Not reportedSUSE-SU-2018:4011-1Not reported
Susespacewalk-setuprpmmanager server 3.22.8.7.5-3.10.3Not reportedSUSE-SU-2018:4011-1Not reported
Susespacewalk-utilsrpmmanager server 3.22.8.18.3-3.3.3Not reportedSUSE-SU-2018:4011-1Not reported
Susespacewalk-webrpmmanager server 3.22.8.7.11-3.13.3Not reportedSUSE-SU-2018:4011-1Not reported
Susesusemanagerrpmmanager server 3.23.2.14-3.13.3Not reportedSUSE-SU-2018:4011-1Not reported
Susesusemanager-docs_enrpmmanager server 3.23.2-11.12.3Not reportedSUSE-SU-2018:4011-1Not reported
Susesusemanager-frontend-libsrpmmanager server 3.23.2.4-3.7.3Not reportedSUSE-SU-2018:4011-1Not reported
Susesusemanager-schemarpmmanager server 3.23.2.15-3.13.3Not reportedSUSE-SU-2018:4011-1Not reported
Susesusemanager-slsrpmmanager server 3.23.2.18-3.13.3Not reportedSUSE-SU-2018:4011-1Not reported
Susesusemanager-sync-datarpmmanager server 3.23.2.10-3.9.3Not reportedSUSE-SU-2018:4011-1Not reported
Susetika-corerpmmanager server 3.21.19.1-3.3.3Not reportedSUSE-SU-2018:4011-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]