SUSE-SU-2025:4479-1

Vulnerability from csaf_suse - Published: 2025-12-18 12:15 - Updated: 2026-09-20 18:33
Summary
Security update 4.3.16.2 for Multi-Linux Manager Server LTS
Severity
Moderate
Notes
Title of the patch: Security update 4.3.16.2 for Multi-Linux Manager Server LTS
Description of the patch: This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.16.2 * SUSE Linux Enterprise Server 15 SP6 LTSS channels enabled * CVEs Fixed: CVE-2025-11065, CVE-2025-64751, CCVE-2025-47911, CVE-2025-58190 CVE-2025-62349, CVE-2025-62348 * Bugs mentioned: bsc#1237060, bsc#1241455, bsc#1250911, bsc#1251864, bsc#1253024
Patchnames: SUSE-2025-4479,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-LTS-2025-4479,SUSE-SLE-Product-SUSE-Manager-Server-4.3-LTS-2025-4479
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2025-11065
4.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch —
Vendor Fix
Unresolved product id: SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch —
Vendor Fix
Threats
Impact moderate
CVE-2025-47911
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 2 products, the same list as for CVE-2025-11065
Threats
Impact moderate
CVE-2025-58190
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 2 products, the same list as for CVE-2025-11065
Threats
Impact moderate
CVE-2025-62348
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2025-11065
Threats
Impact important
CVE-2025-62349
6.2 (Medium)
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L
Affected products
Recommended 2 products, the same list as for CVE-2025-11065
Threats
Impact moderate
CVE-2025-64751
8.2 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected products
Recommended 2 products, the same list as for CVE-2025-11065
Threats
Impact important
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update 4.3.16.2 for Multi-Linux Manager Server LTS",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update fixes the following issues:\n\nrelease-notes-susemanager:\n\n- Update to SUSE Manager 4.3.16.2\n  * SUSE Linux Enterprise Server 15 SP6 LTSS channels enabled\n  * CVEs Fixed:\n    CVE-2025-11065, CVE-2025-64751, CCVE-2025-47911, CVE-2025-58190\n    CVE-2025-62349, CVE-2025-62348\n  * Bugs mentioned:\n    bsc#1237060, bsc#1241455, bsc#1250911, bsc#1251864, bsc#1253024\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-4479,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-LTS-2025-4479,SUSE-SLE-Product-SUSE-Manager-Server-4.3-LTS-2025-4479",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_4479-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:4479-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-20254479-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:4479-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-December/023616.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1237060",
        "url": "https://bugzilla.suse.com/1237060"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1241455",
        "url": "https://bugzilla.suse.com/1241455"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1250911",
        "url": "https://bugzilla.suse.com/1250911"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1251864",
        "url": "https://bugzilla.suse.com/1251864"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1253024",
        "url": "https://bugzilla.suse.com/1253024"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11065 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11065/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-47911 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-47911/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-58190 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-58190/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-62348 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-62348/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-62349 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-62349/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64751 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64751/"
      }
    ],
    "title": "Security update 4.3.16.2 for Multi-Linux Manager Server LTS",
    "tracking": {
      "current_release_date": "2026-09-20T18:33:40Z",
      "generator": {
        "date": "2025-12-18T12:15:07Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:4479-1",
      "initial_release_date": "2025-12-18T12:15:07Z",
      "revision_history": [
        {
          "date": "2025-12-18T12:15:07Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T18:33:40Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch",
                "product": {
                  "name": "release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch",
                  "product_id": "release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/release-notes-susemanager@4.3.16.2-150400.3.148.1?arch=noarch\u0026upstream=release-notes-susemanager-0:4.3.16.2-150400.3.148.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
                "product": {
                  "name": "release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
                  "product_id": "release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/release-notes-susemanager-proxy@4.3.16.2-150400.3.104.2?arch=noarch\u0026upstream=release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy LTS 4.3",
                "product": {
                  "name": "SUSE Manager Proxy LTS 4.3",
                  "product_id": "SUSE Manager Proxy LTS 4.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-proxy-lts:4.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Server LTS 4.3",
                "product": {
                  "name": "SUSE Manager Server LTS 4.3",
                  "product_id": "SUSE Manager Server LTS 4.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server-lts:4.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch as component of SUSE Manager Proxy LTS 4.3",
          "product_id": "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch"
        },
        "product_reference": "release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy LTS 4.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch as component of SUSE Manager Server LTS 4.3",
          "product_id": "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
        },
        "product_reference": "release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server LTS 4.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-11065",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11065"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
          "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11065",
          "url": "https://www.suse.com/security/cve/CVE-2025-11065"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1250608 for CVE-2025-11065",
          "url": "https://bugzilla.suse.com/1250608"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-18T12:15:07Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-11065"
    },
    {
      "cve": "CVE-2025-47911",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-47911"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
          "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-47911",
          "url": "https://www.suse.com/security/cve/CVE-2025-47911"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251308 for CVE-2025-47911",
          "url": "https://bugzilla.suse.com/1251308"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-18T12:15:07Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-47911"
    },
    {
      "cve": "CVE-2025-58190",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-58190"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
          "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-58190",
          "url": "https://www.suse.com/security/cve/CVE-2025-58190"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251309 for CVE-2025-58190",
          "url": "https://bugzilla.suse.com/1251309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-18T12:15:07Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-58190"
    },
    {
      "cve": "CVE-2025-62348",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-62348"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Salt\u0027s junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
          "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-62348",
          "url": "https://www.suse.com/security/cve/CVE-2025-62348"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254256 for CVE-2025-62348",
          "url": "https://bugzilla.suse.com/1254256"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-18T12:15:07Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-62348"
    },
    {
      "cve": "CVE-2025-62349",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-62349"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
          "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-62349",
          "url": "https://www.suse.com/security/cve/CVE-2025-62349"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254257 for CVE-2025-62349",
          "url": "https://bugzilla.suse.com/1254257"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-18T12:15:07Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-62349"
    },
    {
      "cve": "CVE-2025-64751",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64751"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.4.0 to v1.11.0 ( openfga-0.1.34 \u003c= Helm chart \u003c= openfga-0.2.48, v.1.4.0 \u003c= docker \u003c= v.1.11.0) are vulnerable to improper policy enforcement when certain Check and ListObject calls are executed. This issue has been patched in version 1.11.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
          "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64751",
          "url": "https://www.suse.com/security/cve/CVE-2025-64751"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254112 for CVE-2025-64751",
          "url": "https://bugzilla.suse.com/1254112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Proxy LTS 4.3:release-notes-susemanager-proxy-0:4.3.16.2-150400.3.104.2.noarch",
            "SUSE Manager Server LTS 4.3:release-notes-susemanager-0:4.3.16.2-150400.3.148.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-18T12:15:07Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-64751"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.