Novell Inc. SUSE Manager Server Module

Name: Novell Inc. SUSE Manager Server Module
Brand: Novell Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical5high2medium0low

updated 2026-10-28

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-46811US	—OT elevated	11.3% (96th)	Exploit	no fix	2025-07-30	≤ 4.3
CVE-2021-44906US	critical9.8	4.58% (92nd)	Exploit	no fix	2022-03-17	≤ 4.2
CVE-2022-25647US	high7.5	12.2% (96th)	—	no fix	2022-05-01	3 versions
CVE-2022-21698US	high7.5	5.99% (93rd)	—	no fix	2022-02-15	≤ 4.1
CVE-2022-41723US	high7.5OT elevated	4.56% (92nd)	—	no fix	2023-02-28	2 versions
CVE-2022-24839US	high7.5	2.17% (82nd)	—	no fix	2022-04-11	3 versions
CVE-2023-28370US	medium6.1	1.14% (67th)	—	no fix	2023-05-25	2 versions
CVE-2024-38824US	high7.5	1.03% (64th)	—	no fix	2025-06-13	≤ 4.3
CVE-2024-45776US	—	0.30% (23rd)	—	no fix	2025-02-18	≤ 4.3
CVE-2025-22238US	—	0.29% (22nd)	—	no fix	2025-06-13	≤ 4.3
CVE-2024-38823US	—OT elevated	0.26% (17th)	—	no fix	2025-06-13	≤ 4.3
CVE-2024-38822US	—	0.26% (17th)	—	no fix	2025-06-13	≤ 4.3
CVE-2025-4565US	medium5.3	0.26% (17th)	—	no fix	2025-06-16	≤ 4.3
CVE-2025-22241US	—	0.18% (8th)	—	no fix	2025-06-13	≤ 4.3
CVE-2025-22239US	—	0.18% (8th)	—	no fix	2025-06-13	≤ 4.3
CVE-2025-22237US	—	0.18% (7th)	—	no fix	2025-06-13	≤ 4.3
CVE-2025-22236US	—	0.17% (6th)	—	no fix	2025-06-13	≤ 4.3
CVE-2025-22240US	—	0.16% (5th)	—	no fix	2025-06-13	≤ 4.3
CVE-2024-38825US	—	0.15% (4th)	—	no fix	2025-06-13	≤ 4.3
CVE-2025-22242US	—	0.14% (3rd)	—	no fix	2025-06-13	≤ 4.3

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-287Improper Authentication4 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-285Improper Authorization2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.