PT-2025-44398 · Suse · Suse Manager Server Lts 4.3+1

Published 2025-10-28 · Updated 2025-10-30 · CVE-2025-53883

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Container suse/manager versions prior to 5.0.28-150600.3.36.8 SUSE Manager Server LTS 4.3 versions prior to 4.3.88-150400.3.113.5

Description An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) issue exists, allowing attackers to execute arbitrary JavaScript through a reflected Cross-Site Scripting (XSS) flaw in the search fields. The issue enables privileged attackers to execute arbitrary JavaScript.

Recommendations Update Container suse/manager to version 5.0.28-150600.3.36.8 or later. Update SUSE Manager Server LTS 4.3 to version 4.3.88-150400.3.113.5 or later.

Fix

XSS

Weakness Enumeration

CWE-80

Related Identifiers

CVE-2025-53883

SUSE-SU-2025:3826-1

SUSE-SU-2025:3827-1

Affected Products

Suse Manager Server Lts 4.3

Suse Manager

References · 19

• https://osv.dev/vulnerability/SUSE-SU-2025:3826-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3827-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53883 · Security Note
• https://suse.com/support/update/announcement/2025/suse-su-20253827-1 · Note
• https://suse.com/security/cve/CVE-2025-53880 · Note
• https://twitter.com/0dayPublishing/status/1983849992553914809 · Twitter Post
• https://suse.com/security/cve/CVE-2025-53883 · Note
• https://suse.com/security/cve/CVE-2025-53192 · Note
• https://twitter.com/CVEnew/status/1983849780645404829 · Twitter Post
• https://t.me/CVEtracker/36179 · Telegram Post
• https://suse.com/support/update/announcement/2025/suse-su-20253826-1 · Note
• https://bugzilla.suse.com/1246439 · Note
• https://bugzilla.suse.com/1227577 · Note
• https://bugzilla.suse.com/1248252 · Note
• https://twitter.com/VulmonFeeds/status/1983922183840637075 · Twitter Post