CVE catalog
CVE-2021-23901
Security update for SUSE Manager Server 4.0
- Severity
- Critical · CVSS 9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 4.41% · Oct 25, 2026
This update for nutch-core fixes the following issue: - CVE-2021-23901: fixed an XML external entity (XXE) injection in `DmozParser` (bsc#1181356)
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | nutch-core | manager server module 4.1 | 1.0.1-4.3.1 | fixed |
| Suse | cpu-mitigations-formula | manager server module 4.0 | 0.3-4.9.2 | fixed |
| Suse | nutch-core | manager server module 4.0 | 1.0.1-4.5.2 | fixed |
| Suse | smdba | manager server module 4.0 | 1.7.8-0.3.3.2 | fixed |
| Suse | spacecmd | manager server module 4.0 | 4.0.22-3.25.2 | fixed |
| Suse | spacewalk-backend | manager server module 4.0 | 4.0.36-3.41.2 | fixed |
| Suse | spacewalk-branding | manager server module 4.0 | 4.0.19-3.21.3 | fixed |
| Suse | spacewalk-certs-tools | manager server module 4.0 | 4.0.18-3.24.2 | fixed |
| Suse | spacewalk-java | manager server module 4.0 | 4.0.41-3.51.2 | fixed |
| Suse | spacewalk-reports | manager server module 4.0 | 4.0.6-3.3.2 | fixed |
| Suse | spacewalk-utils | manager server module 4.0 | 4.0.19-3.24.2 | fixed |
| Suse | spacewalk-web | manager server module 4.0 | 4.0.26-3.39.3 | fixed |
| Suse | supportutils-plugin-susemanager | manager server module 4.0 | 4.0.5-3.6.2 | fixed |
| Suse | susemanager-doc-indexes | manager server module 4.0 | 4.0-10.30.2 | fixed |
| Suse | susemanager-docs_en | manager server module 4.0 | 4.0-10.30.2 | fixed |
| Suse | susemanager-frontend-libs | manager server module 4.0 | 4.0.3-4.6.2 | fixed |
| Suse | susemanager-schema | manager server module 4.0 | 4.0.24-3.35.2 | fixed |
| Suse | susemanager-sls | manager server module 4.0 | 4.0.32-3.40.2 | fixed |
| Suse | susemanager-sync-data | manager server module 4.0 | 4.0.20-3.32.2 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | nutch-core | rpm | manager server module 4.1 | 1.0.1-4.3.1 | Not reported | SUSE-SU-2021:0323-1 | Not reported |
| Suse | cpu-mitigations-formula | rpm | manager server module 4.0 | 0.3-4.9.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | nutch-core | rpm | manager server module 4.0 | 1.0.1-4.5.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | smdba | rpm | manager server module 4.0 | 1.7.8-0.3.3.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | spacecmd | rpm | manager server module 4.0 | 4.0.22-3.25.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | spacewalk-backend | rpm | manager server module 4.0 | 4.0.36-3.41.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | spacewalk-branding | rpm | manager server module 4.0 | 4.0.19-3.21.3 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | spacewalk-certs-tools | rpm | manager server module 4.0 | 4.0.18-3.24.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | spacewalk-java | rpm | manager server module 4.0 | 4.0.41-3.51.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | spacewalk-reports | rpm | manager server module 4.0 | 4.0.6-3.3.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | spacewalk-utils | rpm | manager server module 4.0 | 4.0.19-3.24.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | spacewalk-web | rpm | manager server module 4.0 | 4.0.26-3.39.3 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | supportutils-plugin-susemanager | rpm | manager server module 4.0 | 4.0.5-3.6.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | susemanager-doc-indexes | rpm | manager server module 4.0 | 4.0-10.30.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | susemanager-docs_en | rpm | manager server module 4.0 | 4.0-10.30.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | susemanager-frontend-libs | rpm | manager server module 4.0 | 4.0.3-4.6.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | susemanager-schema | rpm | manager server module 4.0 | 4.0.24-3.35.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | susemanager-sls | rpm | manager server module 4.0 | 4.0.32-3.40.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
| Suse | susemanager-sync-data | rpm | manager server module 4.0 | 4.0.20-3.32.2 | Not reported | SUSE-SU-2021:0448-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: