opensuse open build service

Name: opensuse open build service
Brand: opensuse

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical5high7medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-12473US	high7.5	1.82% (79th)	—	70d1aa4cc4d7b940180553a63805c22fc62e2cf0	2018-10-02	unspecified → 70d1aa4cc4d7b940180553a63805c22fc62e2cf0
CVE-2018-12479US	high7.5	1.75% (78th)	—	01b015ca2a320afc4fae823465d1e72da8bd60df	2018-10-09	unspecified → 01b015ca2a320afc4fae823465d1e72da8bd60df
CVE-2018-12478US	medium6.5	1.50% (74th)	—	n/a	2018-10-09	unspecified → n/a
CVE-2018-12474US	critical9.8	1.36% (72nd)	—	51a17c553b6ae2598820b7a90fd0c11502a49106	2018-10-09	unspecified → 51a17c553b6ae2598820b7a90fd0c11502a49106
CVE-2020-8021US	medium5.3	1.30% (70th)	—	2.10.5	2020-05-19	Open Build Service → 2.10.5
CVE-2018-7689US	medium6.5OT elevated	1.21% (68th)	—	2.9.3	2018-06-07	unspecified → 2.9.3
CVE-2018-12477US	high7.5	1.17% (67th)	—	d6244245dda5367767efc989446fe4b5e4609cce	2018-10-09	unspecified → d6244245dda5367767efc989446fe4b5e4609cce
CVE-2017-5188US	high7.5	1.15% (67th)	—	20170320	2018-03-01	unspecified → 20170320
CVE-2018-7688US	medium6.5OT elevated	1.10% (66th)	—	2.9.3	2018-06-07	unspecified → 2.9.3
CVE-2013-3703US	medium6.5OT elevated	0.93% (60th)	—	2.4.4	2018-06-08	unspecified → 2.4.4
CVE-2014-0594US	high8.8	0.83% (57th)	—	2.4.6	2018-06-08	unspecified → 2.4.6
CVE-2020-8031US	medium5.4	0.74% (55th)	—	2.10.8	2021-02-11	Open Build Service → 2.10.8
CVE-2018-12475US	medium5.4	0.61% (49th)	—	no fix	2020-09-01	≤ obs-service-download_files ≤0.6.2

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-862Missing Authorization3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-23Relative Path Traversal1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-275CWE-2751 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.