Manager server

This hub aggregates every CVE we track for Manager server, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 12 most recently published vulnerabilities affecting Manager server.

• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV7.8Apr 22, 2026
• CVE-2023-22644JWT token compromise can allow malicious actions including Remote Code Execution (RCE)5.5Sep 20, 2023
• CVE-2023-29552The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial...KEV7.5Apr 25, 2023
• CVE-2022-43754SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do2.6Nov 10, 2022
• CVE-2022-43753SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload4.3Nov 10, 2022
• CVE-2022-31255SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction4.3Nov 10, 2022
• CVE-2022-31248SUMA user enumeration via weak error message5.3Jun 22, 2022
• CVE-2022-21952SUMA unauthenticated remote DoS via resource exhaustion7.5Jun 22, 2022
• CVE-2022-27239In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.7.8Apr 27, 2022
• CVE-2021-4034A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users acc...KEV7.8Jan 28, 2022
• CVE-2014-3654Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTM...4.3Nov 3, 2014
• CVE-2014-3595Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web...4.3Sep 22, 2014