CVE-2025-53883CWE-80

CVE-2025-53883

published October 30, 2025

CVSS

9.3

EPSS

Percentile

20.8

In the wild

Unconfirmed

What it is

A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x86_64/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manager Server LTS 4.3: from ? before 4.3.88-150400.3.113.5.

The record

Technical detail

CVSS: 9.3 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00293 · 20.8th percentile
Weakness: CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published: 2025-10-30T15:15Z

References (1)

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53883 · [email protected]

EPSS history

Timeline

30 OCT 10:50Z
spacewalk-java has various XSS issues on search page
cvelistv5