SUSE
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 31, 2023 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher
Session Not Revoked Server-Side on Logout in Rancher
Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters
Fleet applies namespace labels and annotations without the bundle's service account privileges
Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver
Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet
Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory
Service token exposure and potential privilege escalation in SUSE Observability
Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing
Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass
Monitor SUSE in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.