https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-43754.htmlhttps://patchthecve.com/cve/CVE-2022-43754.htmlWed, 17 Jun 2026 05:07:15 +0000LOW 2.6: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to embed Javhttps://patchthecve.com/cve/CVE-2022-43753.htmlhttps://patchthecve.com/cve/CVE-2022-43753.htmlWed, 17 Jun 2026 05:07:14 +0000MEDIUM 4.3: A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files availhttps://patchthecve.com/cve/CVE-2022-31255.htmlhttps://patchthecve.com/cve/CVE-2022-31255.htmlWed, 17 Jun 2026 04:45:14 +0000MEDIUM 4.3: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files avaihttps://patchthecve.com/cve/CVE-2021-40348.htmlhttps://patchthecve.com/cve/CVE-2021-40348.htmlWed, 17 Jun 2026 04:06:46 +0000HIGH 8.8: Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config-satellite.pl doesn't sanitize the configuration filename used to append Spacewalk-specific key-value pair. The script is intended to be run by the tomcat user account with Sudo, according to the installation set