CVE catalog

CVE-2025-53192

ognl: CVE-2025-53192

[CVE catalog]

Severity
High · CVSS 8.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.56% · Oct 25, 2026

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue​, the OGNL engine parses and evaluates the provided expression with powerful capabilities, including accessing and invoking related methods, etc. Although OgnlRuntime attempts to restrict certain dangerous classes and methods (such as java.lang.Runtime) through a blocklist, these restrictions are not comprehensive. Attackers may be able to bypass the restrictions by leveraging class objects that are not covered by the blocklist and potentially achieve arbitrary code execution. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianognlsid2.7.3-9vulnerable
Debianognlforky2.7.3-9vulnerable
Debianognltrixie2.7.3-8vulnerable
Debianognlbookworm2.7.3-7vulnerable
Opensuseognltumbleweed3.4.7-1.1fixed
Opensusemybatistumbleweed3.5.19-1.1fixed
SuseMulti-Linux-Manager-Proxy-SLE-releasemulti-linux manager proxy extension for sle 5.15.1-150700.16.3.6fixed
Susesuse-multi-linux-manager-5.1-aarch64-proxy-httpd-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.7.30fixed
Susesuse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-imagemulti-linux manager proxy extension for sle 5.15.1.1-9.5.45fixed
Susesuse-multi-linux-manager-5.1-aarch64-proxy-squid-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Susesuse-multi-linux-manager-5.1-aarch64-proxy-ssh-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Susesuse-multi-linux-manager-5.1-aarch64-proxy-tftpd-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Susesuse-multi-linux-manager-5.1-ppc64le-proxy-httpd-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.7.30fixed
Susesuse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-imagemulti-linux manager proxy extension for sle 5.15.1.1-9.5.45fixed
Susesuse-multi-linux-manager-5.1-ppc64le-proxy-squid-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Susesuse-multi-linux-manager-5.1-ppc64le-proxy-ssh-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Susesuse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Susesuse-multi-linux-manager-5.1-s390x-proxy-httpd-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.7.30fixed
Susesuse-multi-linux-manager-5.1-s390x-proxy-salt-broker-imagemulti-linux manager proxy extension for sle 5.15.1.1-9.5.45fixed
Susesuse-multi-linux-manager-5.1-s390x-proxy-squid-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Susesuse-multi-linux-manager-5.1-s390x-proxy-ssh-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Susesuse-multi-linux-manager-5.1-s390x-proxy-tftpd-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Susesuse-multi-linux-manager-5.1-x86_64-proxy-httpd-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.7.30fixed
Susesuse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-imagemulti-linux manager proxy extension for sle 5.15.1.1-9.5.45fixed
Susesuse-multi-linux-manager-5.1-x86_64-proxy-squid-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Susesuse-multi-linux-manager-5.1-x86_64-proxy-ssh-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Susesuse-multi-linux-manager-5.1-x86_64-proxy-tftpd-imagemulti-linux manager proxy extension for sle 5.15.1.1-8.5.20fixed
Suseuyuni-toolsmulti-linux manager proxy extension for sle 5.15.1.22-150700.3.7.4fixed
SuseMulti-Linux-Manager-Server-SLE-releasemulti-linux manager server extension for sle 5.15.1-150700.16.3.6fixed
Susesuse-multi-linux-manager-5.1-aarch64-server-attestation-imagemulti-linux manager server extension for sle 5.15.1.1-8.7.15fixed
Susesuse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.25fixed
Susesuse-multi-linux-manager-5.1-aarch64-server-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.61fixed
Susesuse-multi-linux-manager-5.1-aarch64-server-migration-14-16-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.38fixed
Susesuse-multi-linux-manager-5.1-aarch64-server-postgresql-imagemulti-linux manager server extension for sle 5.15.1.1-6.5.7fixed
Susesuse-multi-linux-manager-5.1-aarch64-server-saline-imagemulti-linux manager server extension for sle 5.15.1.1-9.5.35fixed
Susesuse-multi-linux-manager-5.1-ppc64le-server-attestation-imagemulti-linux manager server extension for sle 5.15.1.1-8.7.15fixed
Susesuse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.25fixed
Susesuse-multi-linux-manager-5.1-ppc64le-server-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.61fixed
Susesuse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.38fixed
Susesuse-multi-linux-manager-5.1-ppc64le-server-postgresql-imagemulti-linux manager server extension for sle 5.15.1.1-6.5.7fixed
Susesuse-multi-linux-manager-5.1-ppc64le-server-saline-imagemulti-linux manager server extension for sle 5.15.1.1-9.5.35fixed
Susesuse-multi-linux-manager-5.1-s390x-server-attestation-imagemulti-linux manager server extension for sle 5.15.1.1-8.7.15fixed
Susesuse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.25fixed
Susesuse-multi-linux-manager-5.1-s390x-server-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.61fixed
Susesuse-multi-linux-manager-5.1-s390x-server-migration-14-16-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.38fixed
Susesuse-multi-linux-manager-5.1-s390x-server-postgresql-imagemulti-linux manager server extension for sle 5.15.1.1-6.5.7fixed
Susesuse-multi-linux-manager-5.1-s390x-server-saline-imagemulti-linux manager server extension for sle 5.15.1.1-9.5.35fixed
Susesuse-multi-linux-manager-5.1-x86_64-server-attestation-imagemulti-linux manager server extension for sle 5.15.1.1-8.7.15fixed
Susesuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.25fixed
Susesuse-multi-linux-manager-5.1-x86_64-server-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.61fixed
Susesuse-multi-linux-manager-5.1-x86_64-server-migration-14-16-imagemulti-linux manager server extension for sle 5.15.1.1-8.5.38fixed
Susesuse-multi-linux-manager-5.1-x86_64-server-postgresql-imagemulti-linux manager server extension for sle 5.15.1.1-6.5.7fixed
Susesuse-multi-linux-manager-5.1-x86_64-server-saline-imagemulti-linux manager server extension for sle 5.15.1.1-9.5.35fixed
Suseuyuni-toolsmulti-linux manager server extension for sle 5.15.1.22-150700.3.7.4fixed
Opensusemybatisleap 15.63.5.19-150200.5.9.1fixed
Opensuseognlleap 15.63.4.7-150200.5.3.1fixed
Suserelease-notes-susemanager-proxymanager proxy lts 4.34.3.16.1-150400.3.101.2fixed
Suserelease-notes-susemanagermanager server lts 4.34.3.16.1-150400.3.143.2fixed
Susesuse-manager-5.0-aarch64-proxy-httpd-imagemanager proxy 5.05.0.5.1-7.24.21fixed
Susesuse-manager-5.0-aarch64-proxy-salt-broker-imagemanager proxy 5.05.0.5.1-7.26.21fixed
Susesuse-manager-5.0-aarch64-proxy-squid-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-aarch64-proxy-ssh-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-aarch64-proxy-tftpd-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-ppc64le-proxy-httpd-imagemanager proxy 5.05.0.5.1-7.24.21fixed
Susesuse-manager-5.0-ppc64le-proxy-salt-broker-imagemanager proxy 5.05.0.5.1-7.26.21fixed
Susesuse-manager-5.0-ppc64le-proxy-squid-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-ppc64le-proxy-ssh-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-ppc64le-proxy-tftpd-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-s390x-proxy-httpd-imagemanager proxy 5.05.0.5.1-7.24.21fixed
Susesuse-manager-5.0-s390x-proxy-salt-broker-imagemanager proxy 5.05.0.5.1-7.26.21fixed
Susesuse-manager-5.0-s390x-proxy-squid-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-s390x-proxy-ssh-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-s390x-proxy-tftpd-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-x86_64-proxy-httpd-imagemanager proxy 5.05.0.5.1-7.24.21fixed
Susesuse-manager-5.0-x86_64-proxy-salt-broker-imagemanager proxy 5.05.0.5.1-7.26.21fixed
Susesuse-manager-5.0-x86_64-proxy-squid-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-x86_64-proxy-ssh-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-x86_64-proxy-tftpd-imagemanager proxy 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-aarch64-proxy-httpd-imagemanager retail branch server extension 5.05.0.5.1-7.24.21fixed
Susesuse-manager-5.0-aarch64-proxy-salt-broker-imagemanager retail branch server extension 5.05.0.5.1-7.26.21fixed
Susesuse-manager-5.0-aarch64-proxy-squid-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-aarch64-proxy-ssh-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-aarch64-proxy-tftpd-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-ppc64le-proxy-httpd-imagemanager retail branch server extension 5.05.0.5.1-7.24.21fixed
Susesuse-manager-5.0-ppc64le-proxy-salt-broker-imagemanager retail branch server extension 5.05.0.5.1-7.26.21fixed
Susesuse-manager-5.0-ppc64le-proxy-squid-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-ppc64le-proxy-ssh-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-ppc64le-proxy-tftpd-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-s390x-proxy-httpd-imagemanager retail branch server extension 5.05.0.5.1-7.24.21fixed
Susesuse-manager-5.0-s390x-proxy-salt-broker-imagemanager retail branch server extension 5.05.0.5.1-7.26.21fixed
Susesuse-manager-5.0-s390x-proxy-squid-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-s390x-proxy-ssh-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-s390x-proxy-tftpd-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-x86_64-proxy-httpd-imagemanager retail branch server extension 5.05.0.5.1-7.24.21fixed
Susesuse-manager-5.0-x86_64-proxy-salt-broker-imagemanager retail branch server extension 5.05.0.5.1-7.26.21fixed
Susesuse-manager-5.0-x86_64-proxy-squid-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-x86_64-proxy-ssh-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-x86_64-proxy-tftpd-imagemanager retail branch server extension 5.05.0.5.1-7.24.7fixed
Susesuse-manager-5.0-aarch64-server-attestation-imagemanager server 5.05.0.5.1-6.28.7fixed
Susesuse-manager-5.0-aarch64-server-hub-xmlrpc-api-imagemanager server 5.05.0.5.1-6.24.9fixed
Susesuse-manager-5.0-aarch64-server-imagemanager server 5.05.0.5.1-7.31.17fixed
Susesuse-manager-5.0-aarch64-server-migration-14-16-imagemanager server 5.05.0.5.1-7.24.12fixed
Susesuse-manager-5.0-ppc64le-server-attestation-imagemanager server 5.05.0.5.1-6.28.7fixed
Susesuse-manager-5.0-ppc64le-server-hub-xmlrpc-api-imagemanager server 5.05.0.5.1-6.24.9fixed
Susesuse-manager-5.0-ppc64le-server-imagemanager server 5.05.0.5.1-7.31.17fixed
Susesuse-manager-5.0-ppc64le-server-migration-14-16-imagemanager server 5.05.0.5.1-7.24.12fixed
Susesuse-manager-5.0-s390x-server-attestation-imagemanager server 5.05.0.5.1-6.28.7fixed
Susesuse-manager-5.0-s390x-server-hub-xmlrpc-api-imagemanager server 5.05.0.5.1-6.24.9fixed
Susesuse-manager-5.0-s390x-server-imagemanager server 5.05.0.5.1-7.31.17fixed
Susesuse-manager-5.0-s390x-server-migration-14-16-imagemanager server 5.05.0.5.1-7.24.12fixed
Susesuse-manager-5.0-x86_64-server-attestation-imagemanager server 5.05.0.5.1-6.28.7fixed
Susesuse-manager-5.0-x86_64-server-hub-xmlrpc-api-imagemanager server 5.05.0.5.1-6.24.9fixed
Susesuse-manager-5.0-x86_64-server-imagemanager server 5.05.0.5.1-7.31.17fixed
Susesuse-manager-5.0-x86_64-server-migration-14-16-imagemanager server 5.05.0.5.1-7.24.12fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianognlsourcesid(unfixed)not yet assignedNot reported[1111588]
Debianognlsourceforky(unfixed)not yet assignedNot reported[1111588]
Debianognlsourcetrixie(unfixed)not yet assignedNot reported[1111588]
Debianognlsourcebookworm(unfixed)not yet assignedNot reported[1111588]
Opensuseognlrpmtumbleweed3.4.7-1.1Not reportedOPENSUSE-SU-2025:15568-1Not reported
Opensusemybatisrpmtumbleweed3.5.19-1.1Not reportedOPENSUSE-SU-2025:15567-1Not reported
SuseMulti-Linux-Manager-Proxy-SLE-releaserpmmulti-linux manager proxy extension for sle 5.15.1-150700.16.3.6Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-aarch64-proxy-httpd-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.7.30Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-9.5.45Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-aarch64-proxy-squid-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-aarch64-proxy-ssh-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-aarch64-proxy-tftpd-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-ppc64le-proxy-httpd-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.7.30Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-9.5.45Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-ppc64le-proxy-squid-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-ppc64le-proxy-ssh-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-s390x-proxy-httpd-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.7.30Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-s390x-proxy-salt-broker-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-9.5.45Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-s390x-proxy-squid-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-s390x-proxy-ssh-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-s390x-proxy-tftpd-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-x86_64-proxy-httpd-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.7.30Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-9.5.45Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-x86_64-proxy-squid-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-x86_64-proxy-ssh-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-x86_64-proxy-tftpd-imagerpmmulti-linux manager proxy extension for sle 5.15.1.1-8.5.20Not reportedSUSE-SU-2025:3839-1Not reported
Suseuyuni-toolsrpmmulti-linux manager proxy extension for sle 5.15.1.22-150700.3.7.4Not reportedSUSE-SU-2025:3839-1Not reported
SuseMulti-Linux-Manager-Server-SLE-releaserpmmulti-linux manager server extension for sle 5.15.1-150700.16.3.6Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-aarch64-server-attestation-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.7.15Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.25Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-aarch64-server-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.61Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-aarch64-server-migration-14-16-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.38Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-aarch64-server-postgresql-imagerpmmulti-linux manager server extension for sle 5.15.1.1-6.5.7Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-aarch64-server-saline-imagerpmmulti-linux manager server extension for sle 5.15.1.1-9.5.35Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-ppc64le-server-attestation-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.7.15Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.25Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-ppc64le-server-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.61Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.38Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-ppc64le-server-postgresql-imagerpmmulti-linux manager server extension for sle 5.15.1.1-6.5.7Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-ppc64le-server-saline-imagerpmmulti-linux manager server extension for sle 5.15.1.1-9.5.35Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-s390x-server-attestation-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.7.15Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.25Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-s390x-server-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.61Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-s390x-server-migration-14-16-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.38Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-s390x-server-postgresql-imagerpmmulti-linux manager server extension for sle 5.15.1.1-6.5.7Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-s390x-server-saline-imagerpmmulti-linux manager server extension for sle 5.15.1.1-9.5.35Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-x86_64-server-attestation-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.7.15Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.25Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-x86_64-server-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.61Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-x86_64-server-migration-14-16-imagerpmmulti-linux manager server extension for sle 5.15.1.1-8.5.38Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-x86_64-server-postgresql-imagerpmmulti-linux manager server extension for sle 5.15.1.1-6.5.7Not reportedSUSE-SU-2025:3839-1Not reported
Susesuse-multi-linux-manager-5.1-x86_64-server-saline-imagerpmmulti-linux manager server extension for sle 5.15.1.1-9.5.35Not reportedSUSE-SU-2025:3839-1Not reported
Suseuyuni-toolsrpmmulti-linux manager server extension for sle 5.15.1.22-150700.3.7.4Not reportedSUSE-SU-2025:3839-1Not reported
Opensusemybatisrpmleap 15.63.5.19-150200.5.9.1Not reportedSUSE-SU-2025:03285-1Not reported
Opensuseognlrpmleap 15.63.4.7-150200.5.3.1Not reportedSUSE-SU-2025:03285-1Not reported
Suserelease-notes-susemanager-proxyrpmmanager proxy lts 4.34.3.16.1-150400.3.101.2Not reportedSUSE-SU-2025:3827-1Not reported
Suserelease-notes-susemanagerrpmmanager server lts 4.34.3.16.1-150400.3.143.2Not reportedSUSE-SU-2025:3827-1Not reported
Susesuse-manager-5.0-aarch64-proxy-httpd-imagerpmmanager proxy 5.05.0.5.1-7.24.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-proxy-salt-broker-imagerpmmanager proxy 5.05.0.5.1-7.26.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-proxy-squid-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-proxy-ssh-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-proxy-tftpd-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-proxy-httpd-imagerpmmanager proxy 5.05.0.5.1-7.24.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-proxy-salt-broker-imagerpmmanager proxy 5.05.0.5.1-7.26.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-proxy-squid-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-proxy-ssh-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-proxy-tftpd-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-proxy-httpd-imagerpmmanager proxy 5.05.0.5.1-7.24.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-proxy-salt-broker-imagerpmmanager proxy 5.05.0.5.1-7.26.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-proxy-squid-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-proxy-ssh-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-proxy-tftpd-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-proxy-httpd-imagerpmmanager proxy 5.05.0.5.1-7.24.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-proxy-salt-broker-imagerpmmanager proxy 5.05.0.5.1-7.26.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-proxy-squid-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-proxy-ssh-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-proxy-tftpd-imagerpmmanager proxy 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-proxy-httpd-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-proxy-salt-broker-imagerpmmanager retail branch server extension 5.05.0.5.1-7.26.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-proxy-squid-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-proxy-ssh-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-proxy-tftpd-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-proxy-httpd-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-proxy-salt-broker-imagerpmmanager retail branch server extension 5.05.0.5.1-7.26.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-proxy-squid-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-proxy-ssh-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-proxy-tftpd-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-proxy-httpd-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-proxy-salt-broker-imagerpmmanager retail branch server extension 5.05.0.5.1-7.26.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-proxy-squid-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-proxy-ssh-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-proxy-tftpd-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-proxy-httpd-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-proxy-salt-broker-imagerpmmanager retail branch server extension 5.05.0.5.1-7.26.21Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-proxy-squid-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-proxy-ssh-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-proxy-tftpd-imagerpmmanager retail branch server extension 5.05.0.5.1-7.24.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-server-attestation-imagerpmmanager server 5.05.0.5.1-6.28.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-server-hub-xmlrpc-api-imagerpmmanager server 5.05.0.5.1-6.24.9Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-server-imagerpmmanager server 5.05.0.5.1-7.31.17Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-aarch64-server-migration-14-16-imagerpmmanager server 5.05.0.5.1-7.24.12Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-server-attestation-imagerpmmanager server 5.05.0.5.1-6.28.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-server-hub-xmlrpc-api-imagerpmmanager server 5.05.0.5.1-6.24.9Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-server-imagerpmmanager server 5.05.0.5.1-7.31.17Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-ppc64le-server-migration-14-16-imagerpmmanager server 5.05.0.5.1-7.24.12Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-server-attestation-imagerpmmanager server 5.05.0.5.1-6.28.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-server-hub-xmlrpc-api-imagerpmmanager server 5.05.0.5.1-6.24.9Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-server-imagerpmmanager server 5.05.0.5.1-7.31.17Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-s390x-server-migration-14-16-imagerpmmanager server 5.05.0.5.1-7.24.12Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-server-attestation-imagerpmmanager server 5.05.0.5.1-6.28.7Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-server-hub-xmlrpc-api-imagerpmmanager server 5.05.0.5.1-6.24.9Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-server-imagerpmmanager server 5.05.0.5.1-7.31.17Not reportedSUSE-SU-2025:3825-1Not reported
Susesuse-manager-5.0-x86_64-server-migration-14-16-imagerpmmanager server 5.05.0.5.1-7.24.12Not reportedSUSE-SU-2025:3825-1Not reported

[Debian bug #1111588]

Notes

[trixie] ognl: Minor issue [bookworm] ognl: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libognl-java]Affected

    Source package: [ognl]

    Details (2)

    • 2.7.3-7 · all · bookworm

      Affected

      dsa · ognl · debian · bookworm; dsa · ognl · debian · 12

    • 2.7.3-7 · all · bookworm

      Affected

      dsa · ognl · debian · bookworm; dsa · ognl · debian · 12

  • [libognl-java-doc]Affected

    Source package: [ognl]

    Details (2)

    • 2.7.3-7 · all · bookworm

      Affected

      dsa · ognl · debian · bookworm; dsa · ognl · debian · 12

    • 2.7.3-7 · all · bookworm

      Affected

      dsa · ognl · debian · bookworm; dsa · ognl · debian · 12

[Debian 13 (Trixie)]

  • [libognl-java]Affected

    Source package: [ognl]

    Details (2)

    • 2.7.3-8 · all · trixie

      Affected

      dsa · ognl · debian · 13

    • 2.7.3-8 · all · trixie

      Affected

      dsa · ognl · debian · 13

  • [libognl-java-doc]Affected

    Source package: [ognl]

    Details (2)

    • 2.7.3-8 · all · trixie

      Affected

      dsa · ognl · debian · 13

    • 2.7.3-8 · all · trixie

      Affected

      dsa · ognl · debian · 13

[openSUSE Tumbleweed]

  • [mybatis-javadoc]Unknown

    Source package: [mybatis]

    Details (1)

    • 3.5.19-2.4 · noarch · tumbleweed

      Unknown · Fixed: 3.5.19-1.1

      Version impact unknown

      dsa · mybatis · opensuse · tumbleweed

  • [ognl-javadoc]Unknown

    Source package: [ognl]

    Details (1)

    • 3.4.7-1.4 · noarch · tumbleweed

      Unknown · Fixed: 3.4.7-1.1

      Version impact unknown

      dsa · ognl · opensuse · tumbleweed

  • [mybatis]Fixed

    Source package: [mybatis]

    Details (1)

    • 3.5.19-2.4 · noarch · tumbleweed

      Fixed · Fixed: 3.5.19-1.1

      dsa · mybatis · opensuse · tumbleweed

  • [ognl]Fixed

    Source package: [ognl]

    Details (1)

    • 3.4.7-1.4 · noarch · tumbleweed

      Fixed · Fixed: 3.4.7-1.1

      dsa · ognl · opensuse · tumbleweed

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]