CVE-2025-23393CWE-80

Reflected XSS in spacewalk-java

Medium · published May 27, 2025

CVSS v4.0

5.6

EPSS

Percentile

26.2

In the wild

Unconfirmed

What it is

A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in spacewalk-java allows execution of arbitrary Javascript code on users machines.This issue affects Container suse/manager/5.0/x86_64/server:5.0.4.7.19.1: from ? before 5.0.24-150600.3.25.1; SUSE Manager Server Module 4.3: from ? before 4.3.85-150400.3.105.3.

The record

Technical detail

CVSS v4.0: 5.6 · MEDIUM
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00340 · 26.2th percentile
Weakness: CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published: 2025-05-27T07:23Z

EPSS history

Timeline

27 MAY 07:23Z
Reflected XSS in spacewalk-java
cvelistv5