Vulnerabilities of SUSE Rancher
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-52280 | A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to… | 7.7 High | Apr 11, 2025 |
| CVE-2024-52282 | A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowing any users with… | 6.2 Medium | Apr 11, 2025 |
| CVE-2025-23387 | A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users… | 5.3 Medium | Apr 11, 2025 |
| CVE-2025-23388 | A Stack-based Buffer Overflow vulnerability in SUSE rancher allows for denial of service.This issue affects rancher:… | 8.2 High | Apr 11, 2025 |
| CVE-2025-23389 | A Improper Access Control vulnerability in SUSE rancher allows a local user to impersonate other identities through SAML… | 8.4 High | Apr 11, 2025 |
| CVE-2025-23391 | A Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the… | 9.1 Critical | Apr 11, 2025 |
| CVE-2022-45157 | A vulnerability has been identified in the way that Rancher stores vSphere's CPI (Cloud Provider Interface) and CSI… | 9.1 Critical | Nov 13, 2024 |
| CVE-2024-22032 | A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption… | 6.5 Medium | Oct 16, 2024 |
| CVE-2024-22030 | A vulnerability has been identified within Rancher that can be exploited in narrow circumstances through a… | 8.0 High | Oct 16, 2024 |
| CVE-2023-32196 | A vulnerability has been identified whereby privilege escalation checks are not properly enforced for… | 6.6 Medium | Oct 16, 2024 |
| CVE-2023-32194 | A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no… | 7.2 High | Oct 16, 2024 |
| CVE-2023-22650 | A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted… | 8.8 High | Oct 16, 2024 |
| CVE-2023-22649 | A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs | 8.4 High | Oct 16, 2024 |
| CVE-2022-43760 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher… | 8.4 High | Jun 1, 2023 |
| CVE-2023-22647 | An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing… | 9.9 Critical | Jun 1, 2023 |
| CVE-2023-22648 | A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be… | 8.0 High | Jun 1, 2023 |
| CVE-2023-22651 | Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation | 9.9 Critical | May 4, 2023 |
| CVE-2022-43758 | A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SUSE… | 7.6 High | Feb 7, 2023 |
| CVE-2022-43757 | A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain… | 9.9 Critical | Feb 7, 2023 |
| CVE-2022-43756 | A Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in… | 5.9 Medium | Feb 7, 2023 |
| CVE-2022-43755 | A Insufficient Entropy vulnerability in SUSE Rancher allows attackers that gained knowledge of the cattle-token to… | 7.1 High | Feb 7, 2023 |
| CVE-2022-43759 | A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to… | 7.2 High | Feb 7, 2023 |
| CVE-2022-31249 | A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in wrangler… | 7.5 High | Feb 7, 2023 |
| CVE-2022-21953 | A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod… | 7.4 High | Feb 7, 2023 |
| CVE-2022-31247 | An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role… | 9.1 Critical | Sep 7, 2022 |
Other SUSE products
neuvector 14
openSUSE Tumbleweed 13
SUSE Linux Enterprise Server 15 13
SUSE Linux Enterprise Server 12 12
SUSE Linux Enterprise Server for SAP 15 8
libzypp 7
SUSE Linux Enterprise Server 15-LTSS 7
SUSE Manager Server Module 4.3 7
SUSE Linux Enterprise Server for SAP Applications 15 SP6 6
supportutils 5
openSUSE Factory 5
SUSE Linux Enterprise Server for SAP Applications 15 SP5 5