Critical severity · published Oct 30, 2025
CVE-2025-53883
spacewalk-java has various XSS issues on search page
9.3
CVSS
0.3%
EPSS
No
On KEV
Description
A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x86_64/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manager Server LTS 4.3: from ? before 4.3.88-150400.3.113.5.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Container suse manager 5.0 · SUSE
before 5.0.28-150600.3.36.8 · source: vendor
SM
SUSE Manager Server LTS 4.3 · SUSE
before 4.3.88-150400.3.113.5 · source: vendor