CVE-2011-0467: A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary…

PriorityP355high8.8CVSS 3.0

AVNACLPRLUINSUCHIHAH

EPSS

1.29%

67.0th percentile

A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE Studio Onsite: versions prior to 1.0.3-0.18.1, SUSE Studio Onsite 1.1 Appliance: versions prior to 1.1.2-0.25.1.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
suse	studio_onsite	< 1.0.3-0.18.1	1.0.3-0.18.1
suse	studio_onsite_appliance	< 1.1.2-0.25.1	1.1.2-0.25.1
suse	suse_studio_onsite	>= unspecified < 1.0.3-0.18.1	1.0.3-0.18.1
suse	suse_studio_onsite_1.1_appliance	>= unspecified < 1.1.2-0.25.1	1.1.2-0.25.1

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.