{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications.\n\nThis release of Red Hat Single Sign-On 7.6.2 serves as a replacement for Red Hat Single Sign-On 7.6.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n* keycloak: XSS on impersonation under specific circumstances (CVE-2022-1438)\n* Moment.js: Path traversal in moment.locale (CVE-2022-24785)\n* keycloak: missing email notification template allowlist (CVE-2022-1274)\n* keycloak: minimist: prototype pollution (CVE-2021-44906)\n* moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129)\n* undertow: DoS can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations (CVE-2022-2764)\n* snakeyaml: Denial of Service due to missing nested depth limitation for collections (CVE-2022-25857)\n* loader-utils: loader-utils:Regular expression denial of service (CVE-2022-37603)\n* keycloak: Session takeover with OIDC offline refreshtokens (CVE-2022-3916)\n* keycloak: path traversal via double URL encoding (CVE-2022-3782)\n* snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode (CVE-2022-38749)\n* snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match (CVE-2022-38751)\n* snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject (CVE-2022-38750)\n* keycloak: Client Registration endpoint does not check token revocation (CVE-2023-0091)\n* keycloak: glob-parent: Regular Expression Denial of Service (CVE-2021-35065)\n* json5: Prototype Pollution in JSON5 via Parse Method (CVE-2022-46175)\n* keycloak: keycloak: user impersonation via stolen uuid code (CVE-2023-0264)\n* snakeyaml: Constructor Deserialization Remote Code Execution (CVE-2022-1471)\n* CXF: Apache CXF: SSRF Vulnerability (CVE-2022-46364)\n* rcue-bootstrap: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)\n* jettison: If the value in map is the map\u0027s self, the new new JSONObject(map) cause StackOverflowError which may lead to dos (CVE-2022-45693)\n* sshd-common: mina-sshd: Java unsafe deserialization vulnerability (CVE-2022-45047)\n* jettison: memory exhaustion via user-supplied XML or JSON data (CVE-2022-40150)\n* jettison: parser crash by stackoverflow (CVE-2022-40149)\n* jackson-databind: use of deeply nested arrays (CVE-2022-42004)\n* jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS (CVE-2022-42003)\n* jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)\n* bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)\n* jquery: Prototype pollution in object\u0027s prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)\n* CXF: Apache CXF: directory listing / code exfiltration (CVE-2022-46363)\n* keycloak: reflected XSS attack (CVE-2022-4137)\n* Keycloak Node.js Adapter: Open redirect vulnerability in checkSSO (CVE-2022-2237)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:1049",
        "url": "https://access.redhat.com/errata/RHSA-2023:1049"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1601614",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1601614"
      },
      {
        "category": "external",
        "summary": "1601617",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1601617"
      },
      {
        "category": "external",
        "summary": "1701972",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1701972"
      },
      {
        "category": "external",
        "summary": "1828406",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1828406"
      },
      {
        "category": "external",
        "summary": "2031904",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2031904"
      },
      {
        "category": "external",
        "summary": "2066009",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2066009"
      },
      {
        "category": "external",
        "summary": "2072009",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072009"
      },
      {
        "category": "external",
        "summary": "2073157",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2073157"
      },
      {
        "category": "external",
        "summary": "2097007",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2097007"
      },
      {
        "category": "external",
        "summary": "2105075",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2105075"
      },
      {
        "category": "external",
        "summary": "2117506",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2117506"
      },
      {
        "category": "external",
        "summary": "2126789",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2126789"
      },
      {
        "category": "external",
        "summary": "2129706",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129706"
      },
      {
        "category": "external",
        "summary": "2129707",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129707"
      },
      {
        "category": "external",
        "summary": "2129709",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129709"
      },
      {
        "category": "external",
        "summary": "2135244",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2135244"
      },
      {
        "category": "external",
        "summary": "2135247",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2135247"
      },
      {
        "category": "external",
        "summary": "2135770",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2135770"
      },
      {
        "category": "external",
        "summary": "2135771",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2135771"
      },
      {
        "category": "external",
        "summary": "2138971",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2138971"
      },
      {
        "category": "external",
        "summary": "2140597",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140597"
      },
      {
        "category": "external",
        "summary": "2141404",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2141404"
      },
      {
        "category": "external",
        "summary": "2145194",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2145194"
      },
      {
        "category": "external",
        "summary": "2148496",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2148496"
      },
      {
        "category": "external",
        "summary": "2150009",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2150009"
      },
      {
        "category": "external",
        "summary": "2155681",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2155681"
      },
      {
        "category": "external",
        "summary": "2155682",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2155682"
      },
      {
        "category": "external",
        "summary": "2155970",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2155970"
      },
      {
        "category": "external",
        "summary": "2156263",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156263"
      },
      {
        "category": "external",
        "summary": "2156324",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156324"
      },
      {
        "category": "external",
        "summary": "2158585",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2158585"
      },
      {
        "category": "external",
        "summary": "2160585",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2160585"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1049.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update",
    "tracking": {
      "current_release_date": "2026-09-10T21:48:23+00:00",
      "generator": {
        "date": "2026-09-10T21:48:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.18"
        }
      },
      "id": "RHSA-2023:1049",
      "initial_release_date": "2023-03-01T21:58:17+00:00",
      "revision_history": [
        {
          "date": "2023-03-01T21:58:17+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-03-01T21:58:17+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-10T21:48:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Single Sign-On 7",
                "product": {
                  "name": "Red Hat Single Sign-On 7",
                  "product_id": "Red Hat Single Sign-On 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Single Sign-On"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-14040",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2018-07-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1601614"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Satellite 6.2 and newer versions don\u0027t use the bootstrap library, hence are not affected by this flaw.\n\nRed Hat CloudForms 4.6 and newer versions include the vulnerable component, but there is no risk of exploitation, since there is no possible vector to access the vulnerability. Older Red Hat CloudForms versions don\u0027t use the vulnerable component at all.\n\nRed Hat Enterprise Satellite 5 is now in Maintenance Support 2 phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Satellite 5 Life Cycle: https://access.redhat.com/support/policy/updates/satellite.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-14040"
        },
        {
          "category": "external",
          "summary": "RHBZ#1601614",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1601614"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-14040",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-14040"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-14040",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14040"
        }
      ],
      "release_date": "2018-05-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute"
    },
    {
      "cve": "CVE-2018-14042",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2018-07-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1601617"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Satellite 6.2 and newer versions don\u0027t use the bootstrap library, hence are not affected by this flaw.\n\nRed Hat CloudForms 4.6 and newer versions include the vulnerable component, but there is no risk of exploitation, since there is no possible vector to access the vulnerability. Older Red Hat CloudForms versions don\u0027t use the vulnerable component at all.\n\nRed Hat Enterprise Satellite 5 is now in Maintenance Support 2 phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Satellite 5 Life Cycle: https://access.redhat.com/support/policy/updates/satellite.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-14042"
        },
        {
          "category": "external",
          "summary": "RHBZ#1601617",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1601617"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-14042",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-14042"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-14042",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14042"
        }
      ],
      "release_date": "2018-05-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip"
    },
    {
      "cve": "CVE-2019-11358",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2019-03-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1701972"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Prototype Pollution vulnerability was found in jquery. Untrusted JSON passed to the `extend` function could lead to modifying objects up the prototype chain, including the global Object. A crafted JSON object passed to a vulnerable method could lead to denial of service or data injection, with various consequences.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jquery: Prototype pollution in object\u0027s prototype leading to denial of service, remote code execution, or property injection",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Virtualization 4.2 EUS contains the affected version of bootstrap in the packages ovirt-js-dependencies and ovirt-engine-dashboard. These packages are deprecated in Red Hat Virtualization 4.3.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-11358"
        },
        {
          "category": "external",
          "summary": "RHBZ#1701972",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1701972"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11358",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-11358"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11358",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11358"
        },
        {
          "category": "external",
          "summary": "https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/",
          "url": "https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/"
        },
        {
          "category": "external",
          "summary": "https://www.drupal.org/sa-core-2019-006",
          "url": "https://www.drupal.org/sa-core-2019-006"
        }
      ],
      "release_date": "2019-03-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jquery: Prototype pollution in object\u0027s prototype leading to denial of service, remote code execution, or property injection"
    },
    {
      "cve": "CVE-2020-11022",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2020-04-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1828406"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Cross-site scripting (XSS) vulnerability exists in JQuery. This flaw allows an attacker with the ability to supply input to the \u2018HTML\u2019 function to inject Javascript into the page where that input is rendered, and have it delivered by the browser.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "No supported release of Red Hat OpenStack Platform is affected by this vulnerability as no shipped packages contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11022"
        },
        {
          "category": "external",
          "summary": "RHBZ#1828406",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1828406"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11022",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11022"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11022",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11022"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-gxr4-xjj5-5px2",
          "url": "https://github.com/advisories/GHSA-gxr4-xjj5-5px2"
        }
      ],
      "release_date": "2020-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method"
    },
    {
      "cve": "CVE-2020-11023",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2020-06-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1850004"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jQuery. HTML containing \\\u003coption\\\u003e elements from untrusted sources are passed, even after sanitizing, to one of jQuery\u0027s DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jquery: Untrusted code execution via \u003coption\u003e tag in HTML passed to DOM manipulation methods",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux versions 6, 7, and 8 ship a vulnerable version of JQuery in the `pcs` component. As PCS does not accept untrusted input, the vulnerable code cannot be controlled by an attacker.\n\nMultiple Red Hat offerings use doxygen to build documentation. During this process an affected jquery.js file can be included in the resulting package. The \u0027gcc\u0027 and \u0027tbb\u0027 packages were potentially vulnerable via this method.\n\nOpenShift Container Platform 4 is not affected because even though it uses the \u0027gcc\u0027 component, vulnerable code is limited within the libstdc++-docs rpm package, which is not shipped.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-11023"
        },
        {
          "category": "external",
          "summary": "RHBZ#1850004",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1850004"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11023",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11023"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11023",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11023"
        },
        {
          "category": "external",
          "summary": "https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/",
          "url": "https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2020-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        },
        {
          "category": "workaround",
          "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2025-01-23T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jquery: Untrusted code execution via \u003coption\u003e tag in HTML passed to DOM manipulation methods"
    },
    {
      "cve": "CVE-2021-35065",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2022-12-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156324"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in the glob-parent package. Affected versions of this package are vulnerable to Regular expression Denial of Service (ReDoS) attacks, affecting system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glob-parent: Regular Expression Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The glob-parent package is a transitive dependency and this is not used directly in any of the Red Hat products. Hence, the impact is reduced to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-35065"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156324",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156324"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-35065",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-35065"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-35065",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-35065"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1314294",
          "url": "https://security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1314294"
        }
      ],
      "release_date": "2022-12-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "glob-parent: Regular Expression Denial of Service"
    },
    {
      "cve": "CVE-2021-44906",
      "cwe": {
        "id": "CWE-1321",
        "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
      },
      "discovery_date": "2022-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2066009"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An Uncontrolled Resource Consumption flaw was found in minimist. The original fix for CVE-2020-7598 was incomplete as it was still possible to bypass in some cases. This flaw (CVE-2021-44906) allows an attacker to trick the library into adding or modifying the properties of Object.prototype, using a constructor or __proto__ payload, resulting in prototype pollution and loss of confidentiality, availability, and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "minimist: prototype pollution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "As minimist is an argument parsing module for nodejs, exploitation of this vulnerability requires an attacker to influence which arguments are passed to nodejs when running a script. Red Hat products and services are designed in such a way that gaining this ability is not trivial. Additionally, the impact is limited by only enabling the pollution of functions, and not all generic objects.\n\nWithin Red Hat Satellite 6 this flaw has been rated as having a security impact of Low. It is not currently planned to be addressed there, as the minimist library is only included in the -doc subpackage and is part of test fixtures that are not in the execution path used by the rabl gem.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-44906"
        },
        {
          "category": "external",
          "summary": "RHBZ#2066009",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2066009"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-44906",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-44906"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-44906",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44906"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-xvch-5gv4-984h",
          "url": "https://github.com/advisories/GHSA-xvch-5gv4-984h"
        }
      ],
      "release_date": "2022-03-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "minimist: prototype pollution"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Marcus Nilsson"
          ],
          "organization": "usd AG"
        }
      ],
      "cve": "CVE-2022-1274",
      "cwe": {
        "id": "CWE-80",
        "name": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
      },
      "discovery_date": "2022-04-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2073157"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: HTML injection in execute-actions-email Admin REST API",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-1274"
        },
        {
          "category": "external",
          "summary": "RHBZ#2073157",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2073157"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-1274",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-1274"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-1274",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1274"
        },
        {
          "category": "external",
          "summary": "https://github.com/keycloak/keycloak/security/advisories/GHSA-m4fv-gm5m-4725",
          "url": "https://github.com/keycloak/keycloak/security/advisories/GHSA-m4fv-gm5m-4725"
        }
      ],
      "release_date": "2023-02-28T18:57:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak: HTML injection in execute-actions-email Admin REST API"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Grzegorz Tworek"
          ],
          "organization": "SISOFT s.c."
        }
      ],
      "cve": "CVE-2022-1438",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2021-12-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2031904"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Keycloak. Under specific circumstances, HTML entities are not sanitized during user impersonation, resulting in a Cross-site scripting (XSS) vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: XSS on impersonation under specific circumstances",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-1438"
        },
        {
          "category": "external",
          "summary": "RHBZ#2031904",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2031904"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-1438",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-1438"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-1438",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1438"
        }
      ],
      "release_date": "2023-02-28T18:56:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak: XSS on impersonation under specific circumstances"
    },
    {
      "cve": "CVE-2022-1471",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2022-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2150009"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the SnakeYaml package. This flaw allows an attacker to benefit from remote code execution by sending malicious YAML content and this content being deserialized by the constructor. Deserialization is unsafe and leads to Remote Code Execution (RCE).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "SnakeYaml: Constructor Deserialization Remote Code Execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In the Red Hat Process Automation 7 (RHPAM) the untrusted, malicious YAML file for deserialization by the vulnerable Snakeyaml\u0027s SafeConstructor class must be provided intentionally by the RHPAM user which requires high privileges. The potential attack complexity is also high because it depends on conditions that are beyond the attacker\u0027s control. Due to that the impact for RHPAM is reduced to Low.\n\nRed Hat Fuse 7 does not expose by default any endpoint that passes incoming data/request into vulnerable Snakeyaml\u0027s Constructor class nor pass untrusted data to this class. When this class is used, it\u2019s still only used to parse internal configuration, hence the impact by this vulnerability to Red Hat Fuse 7 is reduced to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-1471"
        },
        {
          "category": "external",
          "summary": "RHBZ#2150009",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2150009"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-1471",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-1471"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-1471",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1471"
        },
        {
          "category": "external",
          "summary": "https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2",
          "url": "https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2"
        }
      ],
      "release_date": "2022-10-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "SnakeYaml: Constructor Deserialization Remote Code Execution"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ayta\u00e7 Kal\u0131nc\u0131",
            "Ilker Bulgurcu",
            "Yasin Y\u0131lmaz"
          ],
          "organization": "NETA\u015e PENTEST TEAM"
        }
      ],
      "cve": "CVE-2022-2237",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
      },
      "discovery_date": "2022-06-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2097007"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Adapter: Open redirect vulnerability in checkSSO",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "CodeReady Studio is no longer supported. Therefore, this flaw will not be addressed in CodeReady Studio. Please see https://developers.redhat.com/articles/2022/04/18/announcement-red-hat-codeready-studio-reaches-end-life for more information.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-2237"
        },
        {
          "category": "external",
          "summary": "RHBZ#2097007",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2097007"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-2237",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-2237"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-2237",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2237"
        }
      ],
      "release_date": "2023-03-01T13:57:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Adapter: Open redirect vulnerability in checkSSO"
    },
    {
      "cve": "CVE-2022-2764",
      "discovery_date": "2022-08-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2117506"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Undertow with EJB invocations. This flaw allows an attacker to generate a valid HTTP request and send it to the server on an established connection after removing the LAST_CHUNK from the bytes, causing a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Undertow: DoS can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-2764"
        },
        {
          "category": "external",
          "summary": "RHBZ#2117506",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2117506"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-2764",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-2764"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-2764",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2764"
        }
      ],
      "release_date": "2022-08-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Undertow: DoS can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations"
    },
    {
      "cve": "CVE-2022-3782",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2022-10-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2138971"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and potentially sensitive information within the domain or possibly conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: path traversal via double URL encoding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Build of Quarkus is not impacted as this CVE affects the server-side Keycloak execution but Quarkus only acts as a Keycloak client in its quarkus-keycloak-authorization extension. For this reason Quarkus is marked with Low impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-3782"
        },
        {
          "category": "external",
          "summary": "RHBZ#2138971",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2138971"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-3782",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-3782"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-3782",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3782"
        }
      ],
      "release_date": "2022-12-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "keycloak: path traversal via double URL encoding"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Peter Flintholm"
          ],
          "organization": "Trifork"
        }
      ],
      "cve": "CVE-2022-3916",
      "cwe": {
        "id": "CWE-384",
        "name": "Session Fixation"
      },
      "discovery_date": "2022-11-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2141404"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to resolve a user session attached to a previously authenticated user; when utilizing the refresh token, they will be issued a token for the original user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: Session takeover with OIDC offline refreshtokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-3916"
        },
        {
          "category": "external",
          "summary": "RHBZ#2141404",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2141404"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-3916",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-3916"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-3916",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3916"
        }
      ],
      "release_date": "2022-11-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak: Session takeover with OIDC offline refreshtokens"
    },
    {
      "cve": "CVE-2022-4137",
      "cwe": {
        "id": "CWE-81",
        "name": "Improper Neutralization of Script in an Error Message Web Page"
      },
      "discovery_date": "2022-11-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2148496"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A reflected cross-site scripting (XSS) vulnerability was found in the \u0027oob\u0027 OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be vulnerable. This may compromise user details, allowing it to be changed or collected by an attacker.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: reflected XSS attack",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-4137"
        },
        {
          "category": "external",
          "summary": "RHBZ#2148496",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2148496"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-4137",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-4137"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-4137",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4137"
        }
      ],
      "release_date": "2023-03-01T13:56:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "keycloak: reflected XSS attack"
    },
    {
      "cve": "CVE-2022-24785",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2022-04-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2072009"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A path traversal vulnerability was found in Moment.js that impacts npm (server) users. This issue occurs if a user-provided locale string is directly used to switch moment locale, which an attacker can exploit to change the correct path to one of their choice. This can result in a loss of integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Moment.js: Path traversal  in moment.locale",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In Quay 3.10 and above, no version of affected momentjs is present.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24785"
        },
        {
          "category": "external",
          "summary": "RHBZ#2072009",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072009"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24785",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24785"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24785",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24785"
        },
        {
          "category": "external",
          "summary": "https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4",
          "url": "https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4"
        }
      ],
      "release_date": "2022-04-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        },
        {
          "category": "workaround",
          "details": "Sanitize the user-provided locale name before passing it to Moment.js.",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Moment.js: Path traversal  in moment.locale"
    },
    {
      "cve": "CVE-2022-25857",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2022-09-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2126789"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the org.yaml.snakeyaml package. This flaw allows an attacker to cause a denial of service (DoS) due to missing nested depth limitation for collections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "snakeyaml: Denial of Service due to missing nested depth limitation for collections",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "For RHEL-8 it\u0027s downgraded to moderate because \"snakeyaml\" itself in RHEL 8 or RHEL-9 isn\u0027t shipped and \"prometheus-jmx-exporter\" is needed as build dependency. And it\u0027s not directly exploitable, hence severity marked as moderate.\nRed Hat Integration and AMQ products are not vulnerable to this flaw, so their severity has been lowered to moderate.\nRed Hat Single Sign-On uses snakeyaml from liquibase-core and is only used when performing migrations and would require administrator privileges to execute, hence severity marked as Low.\nRed Hat Fuse 7 is now in Maintenance Support Phase and details about its fix should be present soon. However, Red Hat Fuse Online (Syndesis) does will not contain the fix for this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-25857"
        },
        {
          "category": "external",
          "summary": "RHBZ#2126789",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2126789"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-25857",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-25857"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-25857",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25857"
        },
        {
          "category": "external",
          "summary": "https://bitbucket.org/snakeyaml/snakeyaml/issues/525",
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues/525"
        }
      ],
      "release_date": "2022-08-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "snakeyaml: Denial of Service due to missing nested depth limitation for collections"
    },
    {
      "cve": "CVE-2022-31129",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2022-07-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2105075"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Moment.js package. Users who pass user-provided strings without sanity length checks to the moment constructor are vulnerable to regular expression denial of service (ReDoS) attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "moment: inefficient parsing algorithm resulting in DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Fuse provides the affected software but does not use the functionality and as such its impact has been downgraded to Low.\n\nRed Hat Advanced Cluster Management for Kubernetes (RHACM) ships a vulnerable version of the moment library. However, this affected functionality is restricted behind OAuth, reducing the impact to Moderate.\n\nRed Hat Satellite ships a vulnerable version of the moment library. However, this only affects a specific component (qpid-dispatch), reducing the impact to Moderate.\n\nRed Hat Ceph Storage (RHCS) ships a vulnerable version of the moment library, however, it is not directly used and is a transitive dependency from Angular. In addition, the impact would only be to the grafana browser, and not the underlying RHCS system, which reduces the impact to Moderate. \n\nRed Hat OpenShift Service Mesh (OSSM) ships a vulnerable version of the moment library, however, it is not directly used, and as such, the impact has been lowered to Moderate.\n\nRed Hat OpenShift distributed tracing ships a vulnerable version of the moment library, however, it is not directly used, and as such, the impact has been lowered to Moderate.\n\nIn Logging Subsystem for Red Hat OpenShift the vulnerable moment nodejs package is bundled in the ose-logging-kibana6 container as a transitive dependency, hence the direct impact is reduced to Moderate.\n\nIn OpenShift Container Platform 4 the vulnerabile moment package is a third party dependency, hence the direct impact is reduced to Moderate.\n\nIn Quay IO 3.10 and above, no version of affected momentjs is present.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-31129"
        },
        {
          "category": "external",
          "summary": "RHBZ#2105075",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2105075"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-31129",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-31129"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-31129",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31129"
        },
        {
          "category": "external",
          "summary": "https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g",
          "url": "https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g"
        }
      ],
      "release_date": "2022-07-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "moment: inefficient parsing algorithm resulting in DoS"
    },
    {
      "cve": "CVE-2022-37603",
      "cwe": {
        "id": "CWE-185",
        "name": "Incorrect Regular Expression"
      },
      "discovery_date": "2022-11-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2140597"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in loader-utils webpack library. When the url variable from interpolateName is set, the prototype can be polluted. This issue could lead to a regular expression Denial of Service (ReDoS), affecting the availability of the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "loader-utils: Regular expression denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-37603"
        },
        {
          "category": "external",
          "summary": "RHBZ#2140597",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140597"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-37603",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-37603"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-37603",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-37603"
        }
      ],
      "release_date": "2022-10-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "loader-utils: Regular expression denial of service"
    },
    {
      "cve": "CVE-2022-38749",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-09-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2129706"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Build of Quarkus is not affected by this issue as it already includes the fixed version.\n\nSatellite component Candlepin does not directly use snakeyaml, so it is not affected. Regardless, an update with the latest, unaffected snakeyaml version will be provided at next release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-38749"
        },
        {
          "category": "external",
          "summary": "RHBZ#2129706",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129706"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-38749",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-38749"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-38749",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38749"
        }
      ],
      "release_date": "2022-09-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode"
    },
    {
      "cve": "CVE-2022-38750",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-09-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2129707"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Build of Quarkus is not affected by this issue as it already includes the fixed version.\n\nSatellite component Candlepin does not directly use snakeyaml, so it is not affected. Regardless, an update with the latest, unaffected snakeyaml version will be provided at next release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-38750"
        },
        {
          "category": "external",
          "summary": "RHBZ#2129707",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129707"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-38750",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-38750"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-38750",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38750"
        }
      ],
      "release_date": "2022-09-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject"
    },
    {
      "cve": "CVE-2022-38751",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-09-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2129709"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Build of Quarkus is not affected by this issue as it already includes the fixed version.\n\nSatellite component Candlepin does not directly use snakeyaml, so it is not affected. Regardless, an update with the latest, unaffected snakeyaml version will be provided at next release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-38751"
        },
        {
          "category": "external",
          "summary": "RHBZ#2129709",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129709"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-38751",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-38751"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-38751",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38751"
        }
      ],
      "release_date": "2022-09-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match"
    },
    {
      "cve": "CVE-2022-40149",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-10-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2135771"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A stack-based buffer overflow vulnerability was found in Jettison, where parsing an untrusted XML or JSON data may lead to a crash. This flaw allows an attacker to supply content that causes the parser to crash by writing outside the memory bounds if the parser is running on user-supplied input, resulting in a denial of service attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jettison: parser crash by stackoverflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-40149"
        },
        {
          "category": "external",
          "summary": "RHBZ#2135771",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2135771"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-40149",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-40149"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-40149",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40149"
        },
        {
          "category": "external",
          "summary": "https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1",
          "url": "https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1"
        }
      ],
      "release_date": "2022-09-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jettison: parser crash by stackoverflow"
    },
    {
      "cve": "CVE-2022-40150",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2022-10-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2135770"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Jettison, where parsing an untrusted XML or JSON data may lead to a crash. If the parser is running on user-supplied input, an attacker may supply content that causes the parser to crash, causing memory exhaustion. This effect may support a denial of service attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jettison: memory exhaustion via user-supplied XML or JSON data",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-40150"
        },
        {
          "category": "external",
          "summary": "RHBZ#2135770",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2135770"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-40150",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-40150"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-40150",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40150"
        },
        {
          "category": "external",
          "summary": "https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1",
          "url": "https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1"
        }
      ],
      "release_date": "2022-09-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "jettison: memory exhaustion via user-supplied XML or JSON data"
    },
    {
      "cve": "CVE-2022-42003",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2022-10-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2135244"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in FasterXML jackson-databind. This issue could allow an attacker to benefit from resource exhaustion when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled due to unchecked primitive value deserializers to avoid deep wrapper array nesting.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42003"
        },
        {
          "category": "external",
          "summary": "RHBZ#2135244",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2135244"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42003",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42003"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42003",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42003"
        }
      ],
      "release_date": "2022-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS"
    },
    {
      "cve": "CVE-2022-42004",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2022-10-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2135247"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found In FasterXML jackson-databind. This issue could allow an attacker to benefit from resource exhaustion due to the lack of a check in BeanDeserializer._deserializeFromArray to prevent the use of deeply nested arrays. An application is only vulnerable with certain customized choices for deserialization.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: use of deeply nested arrays",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42004"
        },
        {
          "category": "external",
          "summary": "RHBZ#2135247",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2135247"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42004",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42004"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42004",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42004"
        }
      ],
      "release_date": "2022-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: use of deeply nested arrays"
    },
    {
      "cve": "CVE-2022-45047",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2022-11-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2145194"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache MINA SSHD, when using Java deserialization to load a serialized java.security.PrivateKey. An attacker could benefit from unsafe deserialization by inserting unsecured data that may affect the application or server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mina-sshd: Java unsafe deserialization vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Impact as High as there\u0027s a mitigation for minimizing the impact which the flaw requires org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider to be impacted, which would require an external/public API for an attacker to benefit from it. \n\nRed Hat Fuse 7 and Red Hat JBoss Enterprise Application Platform 7 have a lower rate (moderate) as it\u0027s very unlikely to be exploited since those are for internal usage or use a custom implementation in their case.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-45047"
        },
        {
          "category": "external",
          "summary": "RHBZ#2145194",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2145194"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-45047",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-45047"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-45047",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45047"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/dev@mina.apache.org/msg39312.html",
          "url": "https://www.mail-archive.com/dev@mina.apache.org/msg39312.html"
        }
      ],
      "release_date": "2022-11-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        },
        {
          "category": "workaround",
          "details": "From the maintainer:\n\nFor Apache MINA SSHD \u003c= 2.9.1, do not use org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider to generate and later load your server\u0027s host key. Use separately generated host key files, for instance in OpenSSH format, and load them via a org.apache.sshd.common.keyprovider.FileKeyPairProvider instead. Or use a custom implementation instead of \nSimpleGeneratorHostKeyProvider that uses the OpenSSH format for storing and loading the host key (via classes OpenSSHKeyPairResourceWriter and OpenSSHKeyPairResourceParser).",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mina-sshd: Java unsafe deserialization vulnerability"
    },
    {
      "cve": "CVE-2022-45693",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-12-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2155970"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Jettison, where it is vulnerable to a denial of service caused by a stack-based buffer overflow. By sending a specially-crafted request using the map parameter, a remote attacker can cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jettison: If the value in map is the map\u0027s self, the new new JSONObject(map) cause StackOverflowError which may lead to dos",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has determined the impact of this flaw to be Moderate; a successful attack using this flaw would require the processing of untrusted, unsanitized, or unrestricted user inputs, which runs counter to established Red Hat security practices.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-45693"
        },
        {
          "category": "external",
          "summary": "RHBZ#2155970",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2155970"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-45693",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-45693"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-45693",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45693"
        }
      ],
      "release_date": "2022-12-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jettison: If the value in map is the map\u0027s self, the new new JSONObject(map) cause StackOverflowError which may lead to dos"
    },
    {
      "cve": "CVE-2022-46175",
      "cwe": {
        "id": "CWE-1321",
        "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
      },
      "discovery_date": "2022-12-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156263"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the json5 package. The affected version of the json5 package could allow an attacker to set arbitrary and unexpected keys on the object returned from JSON5.parse.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "json5: Prototype Pollution in JSON5 via Parse Method",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The json5 package is a build-time dependency in Red Hat products and is not used in production runtime. Hence, the impact is set to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46175"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156263",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156263"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46175",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46175"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46175",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46175"
        },
        {
          "category": "external",
          "summary": "https://github.com/json5/json5/security/advisories/GHSA-9c47-m6qq-7p4h",
          "url": "https://github.com/json5/json5/security/advisories/GHSA-9c47-m6qq-7p4h"
        }
      ],
      "release_date": "2022-12-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "json5: Prototype Pollution in JSON5 via Parse Method"
    },
    {
      "cve": "CVE-2022-46363",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2022-12-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2155681"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache CXF that could allow an attacker to perform a remote directory listing or code exfiltration. This issue only applies when the CXFServlet is configured with both the static-resources-list and redirect-query-check attributes. These attributes are not supposed to be used together, so the issue can only occur if the CXF service is misconfigured.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "CXF: directory listing / code exfiltration",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46363"
        },
        {
          "category": "external",
          "summary": "RHBZ#2155681",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2155681"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46363",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46363"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46363",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46363"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c",
          "url": "https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c"
        }
      ],
      "release_date": "2022-12-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "CXF: directory listing / code exfiltration"
    },
    {
      "cve": "CVE-2022-46364",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2022-12-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2155682"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A SSRF vulnerability was found in Apache CXF. This issue occurs when parsing the href attribute of XOP:Include in MTOM requests, allowing an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "CXF: SSRF Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Integration Camel Quarkus does not support CXF extensions and so is affected at a reduced impact of Moderate.\nThe RHSSO server does not ship Apache CXF. The component mentioned in CVE-2022-46364 is a transitive dependency coming from Fuse adapters and the test suite.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46364"
        },
        {
          "category": "external",
          "summary": "RHBZ#2155682",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2155682"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46364",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46364"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46364",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46364"
        },
        {
          "category": "external",
          "summary": "https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1\u0026modificationDate=1670944472739\u0026api=v2",
          "url": "https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1\u0026modificationDate=1670944472739\u0026api=v2"
        }
      ],
      "release_date": "2022-12-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "CXF: SSRF Vulnerability"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Sourav Kumar"
          ],
          "organization": "https://github.com/souravs17031999",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2023-0091",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2022-10-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2158585"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: Client Registration endpoint does not check token revocation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-0091"
        },
        {
          "category": "external",
          "summary": "RHBZ#2158585",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2158585"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-0091",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-0091"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-0091",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0091"
        },
        {
          "category": "external",
          "summary": "https://github.com/keycloak/keycloak/security/advisories/GHSA-v436-q368-hvgg",
          "url": "https://github.com/keycloak/keycloak/security/advisories/GHSA-v436-q368-hvgg"
        },
        {
          "category": "external",
          "summary": "https://github.com/keycloak/security/issues/27",
          "url": "https://github.com/keycloak/security/issues/27"
        }
      ],
      "release_date": "2022-10-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "keycloak: Client Registration endpoint does not check token revocation"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jordi Zayuelas i Mu\u00f1oz"
          ],
          "organization": "A1 Digital",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2023-0264",
      "cwe": {
        "id": "CWE-303",
        "name": "Incorrect Implementation of Authentication Algorithm"
      },
      "discovery_date": "2023-01-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2160585"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Keycloak\u0027s OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue could impact confidentiality, Integrity, and availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak: user impersonation via stolen uuid code",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Single Sign-On 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-0264"
        },
        {
          "category": "external",
          "summary": "RHBZ#2160585",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2160585"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-0264",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-0264"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-0264",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0264"
        }
      ],
      "release_date": "2023-02-28T18:58:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-01T21:58:17+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Single Sign-On 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1049"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Single Sign-On 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak: user impersonation via stolen uuid code"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for SUSE Manager Server 3.2",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update fixes the following issues:\n\nbind-formula:\n\n- Remove wrong default for bind options preventing correct upload\n  of bind options using XMLRPC (bsc#1150657)\n\nbranch-network-formula:\n\n- Make branch formula to assign home directory to ftp and tftp users (bsc#1162391)\n\npy26-compat-salt:\n\n- Do not make py26-compat-salt to require python-tornado on SLE15 (all SPs)\n- Backport saltutil state module to 2016.11 codebase (bsc#1167556)\n- Add new custom SUSE capability for saltutil state module\n\npython-susemanager-retail:\n\n- Allow bind options to be stored to and edited by retail_yaml (bsc#1150657)\n\nrelease-notes-susemanager:\n\n- Update to 3.2.15\n- Bugs mentioned\n  bsc#1150657, bsc#1162391, bsc#1167556, bsc#1174965, bsc#1170331, bsc#1159184, bsc#1168227, bsc#1172831, \n  bsc#1173073, bsc#1167871, bsc#1169109, bsc#1159202, bsc#1168227, bsc#1153578, bsc#1141663, bsc#1174768, \n  bsc#1173946, bsc#1174167, bsc#1169865, bsc#1155794\n\nspacewalk-backend:\n\n- Fix issues importing RPM packages with long RPM headers (bsc#1174965)\n- Do not make mgr-inter-sync to crash if there are non-ASCII\n  characters on an exception message (bsc#1170331)\n- Validate cached package entries on ISS slave (bsc#1159184)\n\nspacewalk-client-tools:\n\n- Do not crash \u0027mgr-update-status\u0027 because \u0027long\u0027 type is not defined in Python 3\n\nspacewalk-java:\n\n- Skip upgrades when the target has not the same amount of products\n  as the installed set (bsc#1168227)\n- Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831)\n- Prevent deadlock on suseusernotification (bsc#1173073)\n- Avoid multiple base channels when onboarding minions (bsc#1167871)\n- Hide message about changed Update Tag change (bsc#1169109)\n- Refresh pillar after channel change\n- Use \u0027changes\u0027 field if \u0027pchanges\u0027 field doesn\u0027t exist (bsc#1159202)\n- Skip migration targets when they do not have the same amount of\n  products as the installed set (bsc#1168227)\n\nspacewalk-utils:\n\n- Add FQDN resolver for spacewalk-manage-channel-lifecycle (bsc#1153578)\n- Fixes SSL hostname matching (bsc#1141663)\n\nspacewalk-web:\n\n- Fix saving of formulas (bsc#1174768)\n- Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831)\n\nsusemanager:\n\n- Use python2-uyuni-common-libs and python3-uyuni-common-libs for\n  bootstrap repositories (bsc#1173946)\n- Add \u0027python-singledispatch\u0027 to SLE12 (all SPs) and RES7 bootstrap repos. (bsc#1174700)\n- Add SLE 15 LTSS Product ID to SLE15 bootstrap repositories, as\n  it is required to get python3-M2crypto (bsc#1174167)\n- Require python3-tornado only for SLE15/SLE15SP1 (bsc#1169865)\n- Use python3-M2Crypto for all SLE15 versions and openSUSE Leap 15.1\n  bootstrap repositories\n- Add dbus-1-glib to SLE12SP5 x86_64 to allow onboarding of AWS Cloud SLE12SP5\n  clients (they do not have it by defaul anymore)\n\nsusemanager-frontend-libs:\n\n- Upgrade jquery to 3.5.1 - CVE-2020-11022 (bsc#1172831)\n\nsusemanager-schema:\n\n- Prevent a deadlock error involving delete_server and update_needed_cache (bsc#1173073)\n\nsusemanager-sls:\n\n- Avoid traceback error due lazy loading which_bin (bsc#1155794)\n- Using new module path for which_bin to get rid of DeprecationWarning\n\nHow to apply this update:\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\nspacewalk-service stop\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Upgrade the database schema:\nspacewalk-schema-upgrade\n5. Start the Spacewalk service:\nspacewalk-service start\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2020-2292,SUSE-SUSE-Manager-Proxy-3.2-2020-2292,SUSE-SUSE-Manager-Server-3.2-2020-2292",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2292-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2020:2292-1",
        "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20202292-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2020:2292-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-August/007286.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1141663",
        "url": "https://bugzilla.suse.com/1141663"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150657",
        "url": "https://bugzilla.suse.com/1150657"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153578",
        "url": "https://bugzilla.suse.com/1153578"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155794",
        "url": "https://bugzilla.suse.com/1155794"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1159184",
        "url": "https://bugzilla.suse.com/1159184"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1159202",
        "url": "https://bugzilla.suse.com/1159202"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1162391",
        "url": "https://bugzilla.suse.com/1162391"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167556",
        "url": "https://bugzilla.suse.com/1167556"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167871",
        "url": "https://bugzilla.suse.com/1167871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1168227",
        "url": "https://bugzilla.suse.com/1168227"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1169109",
        "url": "https://bugzilla.suse.com/1169109"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1169865",
        "url": "https://bugzilla.suse.com/1169865"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170331",
        "url": "https://bugzilla.suse.com/1170331"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172831",
        "url": "https://bugzilla.suse.com/1172831"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173073",
        "url": "https://bugzilla.suse.com/1173073"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173946",
        "url": "https://bugzilla.suse.com/1173946"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174167",
        "url": "https://bugzilla.suse.com/1174167"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174700",
        "url": "https://bugzilla.suse.com/1174700"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174768",
        "url": "https://bugzilla.suse.com/1174768"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174965",
        "url": "https://bugzilla.suse.com/1174965"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-11022 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-11022/"
      }
    ],
    "title": "Security update for SUSE Manager Server 3.2",
    "tracking": {
      "current_release_date": "2020-08-21T12:32:10Z",
      "generator": {
        "date": "2020-08-21T12:32:10Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2020:2292-1",
      "initial_release_date": "2020-08-21T12:32:10Z",
      "revision_history": [
        {
          "date": "2020-08-21T12:32:10Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "release-notes-susemanager-3.2.15-6.61.1.aarch64",
                "product": {
                  "name": "release-notes-susemanager-3.2.15-6.61.1.aarch64",
                  "product_id": "release-notes-susemanager-3.2.15-6.61.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.aarch64",
                "product": {
                  "name": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.aarch64",
                  "product_id": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-3.2.24-3.43.1.aarch64",
                "product": {
                  "name": "susemanager-3.2.24-3.43.1.aarch64",
                  "product_id": "susemanager-3.2.24-3.43.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-3.2.24-3.43.1.aarch64",
                "product": {
                  "name": "susemanager-tools-3.2.24-3.43.1.aarch64",
                  "product_id": "susemanager-tools-3.2.24-3.43.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-formula-0.1.1584363976.36bce64-3.6.1.noarch",
                "product": {
                  "name": "bind-formula-0.1.1584363976.36bce64-3.6.1.noarch",
                  "product_id": "bind-formula-0.1.1584363976.36bce64-3.6.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "branch-network-formula-0.1.1584363976.36bce64-3.9.1.noarch",
                "product": {
                  "name": "branch-network-formula-0.1.1584363976.36bce64-3.9.1.noarch",
                  "product_id": "branch-network-formula-0.1.1584363976.36bce64-3.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "py26-compat-salt-2016.11.10-6.38.1.noarch",
                "product": {
                  "name": "py26-compat-salt-2016.11.10-6.38.1.noarch",
                  "product_id": "py26-compat-salt-2016.11.10-6.38.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-susemanager-retail-1.0.1584363976.36bce64-2.12.1.noarch",
                "product": {
                  "name": "python-susemanager-retail-1.0.1584363976.36bce64-2.12.1.noarch",
                  "product_id": "python-susemanager-retail-1.0.1584363976.36bce64-2.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-spacewalk-check-2.8.22.8-3.15.1.noarch",
                "product": {
                  "name": "python2-spacewalk-check-2.8.22.8-3.15.1.noarch",
                  "product_id": "python2-spacewalk-check-2.8.22.8-3.15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
                "product": {
                  "name": "python2-spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
                  "product_id": "python2-spacewalk-client-setup-2.8.22.8-3.15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
                "product": {
                  "name": "python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
                  "product_id": "python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
                "product": {
                  "name": "python2-zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
                  "product_id": "python2-zypp-plugin-spacewalk-1.0.7-3.13.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-app-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-app-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-app-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-applet-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-applet-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-applet-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-cdn-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-cdn-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-cdn-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-config-files-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-config-files-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-config-files-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-config-files-common-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-config-files-common-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-config-files-common-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-config-files-tool-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-config-files-tool-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-config-files-tool-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-iss-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-iss-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-iss-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-iss-export-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-iss-export-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-iss-export-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-libs-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-libs-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-libs-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-package-push-server-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-package-push-server-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-package-push-server-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-server-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-server-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-server-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-sql-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-sql-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-sql-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-sql-oracle-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-sql-oracle-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-sql-oracle-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-sql-postgresql-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-sql-postgresql-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-sql-postgresql-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-tools-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-tools-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-tools-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-xml-export-libs-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-xml-export-libs-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-xml-export-libs-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-xmlrpc-2.8.57.23-3.51.1.noarch",
                "product": {
                  "name": "spacewalk-backend-xmlrpc-2.8.57.23-3.51.1.noarch",
                  "product_id": "spacewalk-backend-xmlrpc-2.8.57.23-3.51.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-2.8.7.24-3.48.1.noarch",
                "product": {
                  "name": "spacewalk-base-2.8.7.24-3.48.1.noarch",
                  "product_id": "spacewalk-base-2.8.7.24-3.48.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-minimal-2.8.7.24-3.48.1.noarch",
                "product": {
                  "name": "spacewalk-base-minimal-2.8.7.24-3.48.1.noarch",
                  "product_id": "spacewalk-base-minimal-2.8.7.24-3.48.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch",
                "product": {
                  "name": "spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch",
                  "product_id": "spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-check-2.8.22.8-3.15.1.noarch",
                "product": {
                  "name": "spacewalk-check-2.8.22.8-3.15.1.noarch",
                  "product_id": "spacewalk-check-2.8.22.8-3.15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
                "product": {
                  "name": "spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
                  "product_id": "spacewalk-client-setup-2.8.22.8-3.15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
                "product": {
                  "name": "spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
                  "product_id": "spacewalk-client-tools-2.8.22.8-3.15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-dobby-2.8.7.24-3.48.1.noarch",
                "product": {
                  "name": "spacewalk-dobby-2.8.7.24-3.48.1.noarch",
                  "product_id": "spacewalk-dobby-2.8.7.24-3.48.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-html-2.8.7.24-3.48.1.noarch",
                "product": {
                  "name": "spacewalk-html-2.8.7.24-3.48.1.noarch",
                  "product_id": "spacewalk-html-2.8.7.24-3.48.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-2.8.78.29-3.50.1.noarch",
                "product": {
                  "name": "spacewalk-java-2.8.78.29-3.50.1.noarch",
                  "product_id": "spacewalk-java-2.8.78.29-3.50.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-apidoc-sources-2.8.78.29-3.50.1.noarch",
                "product": {
                  "name": "spacewalk-java-apidoc-sources-2.8.78.29-3.50.1.noarch",
                  "product_id": "spacewalk-java-apidoc-sources-2.8.78.29-3.50.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-config-2.8.78.29-3.50.1.noarch",
                "product": {
                  "name": "spacewalk-java-config-2.8.78.29-3.50.1.noarch",
                  "product_id": "spacewalk-java-config-2.8.78.29-3.50.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-lib-2.8.78.29-3.50.1.noarch",
                "product": {
                  "name": "spacewalk-java-lib-2.8.78.29-3.50.1.noarch",
                  "product_id": "spacewalk-java-lib-2.8.78.29-3.50.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-oracle-2.8.78.29-3.50.1.noarch",
                "product": {
                  "name": "spacewalk-java-oracle-2.8.78.29-3.50.1.noarch",
                  "product_id": "spacewalk-java-oracle-2.8.78.29-3.50.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-postgresql-2.8.78.29-3.50.1.noarch",
                "product": {
                  "name": "spacewalk-java-postgresql-2.8.78.29-3.50.1.noarch",
                  "product_id": "spacewalk-java-postgresql-2.8.78.29-3.50.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-installer-2.8.6.8-3.18.1.noarch",
                "product": {
                  "name": "spacewalk-proxy-installer-2.8.6.8-3.18.1.noarch",
                  "product_id": "spacewalk-proxy-installer-2.8.6.8-3.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-taskomatic-2.8.78.29-3.50.1.noarch",
                "product": {
                  "name": "spacewalk-taskomatic-2.8.78.29-3.50.1.noarch",
                  "product_id": "spacewalk-taskomatic-2.8.78.29-3.50.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-utils-2.8.18.7-3.15.1.noarch",
                "product": {
                  "name": "spacewalk-utils-2.8.18.7-3.15.1.noarch",
                  "product_id": "spacewalk-utils-2.8.18.7-3.15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-frontend-libs-3.2.5-3.13.1.noarch",
                "product": {
                  "name": "susemanager-frontend-libs-3.2.5-3.13.1.noarch",
                  "product_id": "susemanager-frontend-libs-3.2.5-3.13.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-frontend-libs-devel-3.2.5-3.13.1.noarch",
                "product": {
                  "name": "susemanager-frontend-libs-devel-3.2.5-3.13.1.noarch",
                  "product_id": "susemanager-frontend-libs-devel-3.2.5-3.13.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-retail-tools-1.0.1584363976.36bce64-2.12.1.noarch",
                "product": {
                  "name": "susemanager-retail-tools-1.0.1584363976.36bce64-2.12.1.noarch",
                  "product_id": "susemanager-retail-tools-1.0.1584363976.36bce64-2.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-schema-3.2.24-3.40.1.noarch",
                "product": {
                  "name": "susemanager-schema-3.2.24-3.40.1.noarch",
                  "product_id": "susemanager-schema-3.2.24-3.40.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-schema-sanity-3.2.24-3.40.1.noarch",
                "product": {
                  "name": "susemanager-schema-sanity-3.2.24-3.40.1.noarch",
                  "product_id": "susemanager-schema-sanity-3.2.24-3.40.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-sls-3.2.31-3.47.1.noarch",
                "product": {
                  "name": "susemanager-sls-3.2.31-3.47.1.noarch",
                  "product_id": "susemanager-sls-3.2.31-3.47.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-web-libs-2.8.7.24-3.48.1.noarch",
                "product": {
                  "name": "susemanager-web-libs-2.8.7.24-3.48.1.noarch",
                  "product_id": "susemanager-web-libs-2.8.7.24-3.48.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
                "product": {
                  "name": "zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
                  "product_id": "zypp-plugin-spacewalk-1.0.7-3.13.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "release-notes-susemanager-3.2.15-6.61.1.ppc64le",
                "product": {
                  "name": "release-notes-susemanager-3.2.15-6.61.1.ppc64le",
                  "product_id": "release-notes-susemanager-3.2.15-6.61.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.ppc64le",
                "product": {
                  "name": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.ppc64le",
                  "product_id": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-3.2.24-3.43.1.ppc64le",
                "product": {
                  "name": "susemanager-3.2.24-3.43.1.ppc64le",
                  "product_id": "susemanager-3.2.24-3.43.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-3.2.24-3.43.1.ppc64le",
                "product": {
                  "name": "susemanager-tools-3.2.24-3.43.1.ppc64le",
                  "product_id": "susemanager-tools-3.2.24-3.43.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "release-notes-susemanager-3.2.15-6.61.1.s390x",
                "product": {
                  "name": "release-notes-susemanager-3.2.15-6.61.1.s390x",
                  "product_id": "release-notes-susemanager-3.2.15-6.61.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.s390x",
                "product": {
                  "name": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.s390x",
                  "product_id": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-3.2.24-3.43.1.s390x",
                "product": {
                  "name": "susemanager-3.2.24-3.43.1.s390x",
                  "product_id": "susemanager-3.2.24-3.43.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-3.2.24-3.43.1.s390x",
                "product": {
                  "name": "susemanager-tools-3.2.24-3.43.1.s390x",
                  "product_id": "susemanager-tools-3.2.24-3.43.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "release-notes-susemanager-3.2.15-6.61.1.x86_64",
                "product": {
                  "name": "release-notes-susemanager-3.2.15-6.61.1.x86_64",
                  "product_id": "release-notes-susemanager-3.2.15-6.61.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.x86_64",
                "product": {
                  "name": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.x86_64",
                  "product_id": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-3.2.24-3.43.1.x86_64",
                "product": {
                  "name": "susemanager-3.2.24-3.43.1.x86_64",
                  "product_id": "susemanager-3.2.24-3.43.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-3.2.24-3.43.1.x86_64",
                "product": {
                  "name": "susemanager-tools-3.2.24-3.43.1.x86_64",
                  "product_id": "susemanager-tools-3.2.24-3.43.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy 3.2",
                "product": {
                  "name": "SUSE Manager Proxy 3.2",
                  "product_id": "SUSE Manager Proxy 3.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-proxy:3.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Server 3.2",
                "product": {
                  "name": "SUSE Manager Server 3.2",
                  "product_id": "SUSE Manager Server 3.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server:3.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-spacewalk-check-2.8.22.8-3.15.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:python2-spacewalk-check-2.8.22.8-3.15.1.noarch"
        },
        "product_reference": "python2-spacewalk-check-2.8.22.8-3.15.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-spacewalk-client-setup-2.8.22.8-3.15.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:python2-spacewalk-client-setup-2.8.22.8-3.15.1.noarch"
        },
        "product_reference": "python2-spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch"
        },
        "product_reference": "python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-zypp-plugin-spacewalk-1.0.7-3.13.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:python2-zypp-plugin-spacewalk-1.0.7-3.13.1.noarch"
        },
        "product_reference": "python2-zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.x86_64 as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:release-notes-susemanager-proxy-3.2.15-0.16.47.1.x86_64"
        },
        "product_reference": "release-notes-susemanager-proxy-3.2.15-0.16.47.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-2.8.57.23-3.51.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:spacewalk-backend-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-libs-2.8.57.23-3.51.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:spacewalk-backend-libs-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-libs-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-2.8.7.24-3.48.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:spacewalk-base-minimal-2.8.7.24-3.48.1.noarch"
        },
        "product_reference": "spacewalk-base-minimal-2.8.7.24-3.48.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch"
        },
        "product_reference": "spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-check-2.8.22.8-3.15.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:spacewalk-check-2.8.22.8-3.15.1.noarch"
        },
        "product_reference": "spacewalk-check-2.8.22.8-3.15.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-client-setup-2.8.22.8-3.15.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:spacewalk-client-setup-2.8.22.8-3.15.1.noarch"
        },
        "product_reference": "spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-client-tools-2.8.22.8-3.15.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:spacewalk-client-tools-2.8.22.8-3.15.1.noarch"
        },
        "product_reference": "spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-installer-2.8.6.8-3.18.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:spacewalk-proxy-installer-2.8.6.8-3.18.1.noarch"
        },
        "product_reference": "spacewalk-proxy-installer-2.8.6.8-3.18.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-web-libs-2.8.7.24-3.48.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:susemanager-web-libs-2.8.7.24-3.48.1.noarch"
        },
        "product_reference": "susemanager-web-libs-2.8.7.24-3.48.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zypp-plugin-spacewalk-1.0.7-3.13.1.noarch as component of SUSE Manager Proxy 3.2",
          "product_id": "SUSE Manager Proxy 3.2:zypp-plugin-spacewalk-1.0.7-3.13.1.noarch"
        },
        "product_reference": "zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-formula-0.1.1584363976.36bce64-3.6.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:bind-formula-0.1.1584363976.36bce64-3.6.1.noarch"
        },
        "product_reference": "bind-formula-0.1.1584363976.36bce64-3.6.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "branch-network-formula-0.1.1584363976.36bce64-3.9.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:branch-network-formula-0.1.1584363976.36bce64-3.9.1.noarch"
        },
        "product_reference": "branch-network-formula-0.1.1584363976.36bce64-3.9.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "py26-compat-salt-2016.11.10-6.38.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:py26-compat-salt-2016.11.10-6.38.1.noarch"
        },
        "product_reference": "py26-compat-salt-2016.11.10-6.38.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-susemanager-retail-1.0.1584363976.36bce64-2.12.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:python-susemanager-retail-1.0.1584363976.36bce64-2.12.1.noarch"
        },
        "product_reference": "python-susemanager-retail-1.0.1584363976.36bce64-2.12.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch"
        },
        "product_reference": "python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "release-notes-susemanager-3.2.15-6.61.1.ppc64le as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.ppc64le"
        },
        "product_reference": "release-notes-susemanager-3.2.15-6.61.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "release-notes-susemanager-3.2.15-6.61.1.s390x as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.s390x"
        },
        "product_reference": "release-notes-susemanager-3.2.15-6.61.1.s390x",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "release-notes-susemanager-3.2.15-6.61.1.x86_64 as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.x86_64"
        },
        "product_reference": "release-notes-susemanager-3.2.15-6.61.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-app-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-app-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-app-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-applet-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-applet-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-applet-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-config-files-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-config-files-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-config-files-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-config-files-common-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-config-files-common-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-config-files-common-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-config-files-tool-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-config-files-tool-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-config-files-tool-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-iss-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-iss-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-iss-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-iss-export-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-iss-export-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-iss-export-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-libs-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-libs-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-libs-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-package-push-server-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-package-push-server-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-package-push-server-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-server-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-server-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-server-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-sql-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-sql-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-sql-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-sql-oracle-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-sql-oracle-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-sql-oracle-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-sql-postgresql-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-sql-postgresql-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-sql-postgresql-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-tools-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-tools-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-tools-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-xml-export-libs-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-xml-export-libs-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-xml-export-libs-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-xmlrpc-2.8.57.23-3.51.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-backend-xmlrpc-2.8.57.23-3.51.1.noarch"
        },
        "product_reference": "spacewalk-backend-xmlrpc-2.8.57.23-3.51.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-2.8.7.24-3.48.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-base-2.8.7.24-3.48.1.noarch"
        },
        "product_reference": "spacewalk-base-2.8.7.24-3.48.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-2.8.7.24-3.48.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-base-minimal-2.8.7.24-3.48.1.noarch"
        },
        "product_reference": "spacewalk-base-minimal-2.8.7.24-3.48.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch"
        },
        "product_reference": "spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-client-tools-2.8.22.8-3.15.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-client-tools-2.8.22.8-3.15.1.noarch"
        },
        "product_reference": "spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-html-2.8.7.24-3.48.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-html-2.8.7.24-3.48.1.noarch"
        },
        "product_reference": "spacewalk-html-2.8.7.24-3.48.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-2.8.78.29-3.50.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-java-2.8.78.29-3.50.1.noarch"
        },
        "product_reference": "spacewalk-java-2.8.78.29-3.50.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-config-2.8.78.29-3.50.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-java-config-2.8.78.29-3.50.1.noarch"
        },
        "product_reference": "spacewalk-java-config-2.8.78.29-3.50.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-lib-2.8.78.29-3.50.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-java-lib-2.8.78.29-3.50.1.noarch"
        },
        "product_reference": "spacewalk-java-lib-2.8.78.29-3.50.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-oracle-2.8.78.29-3.50.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-java-oracle-2.8.78.29-3.50.1.noarch"
        },
        "product_reference": "spacewalk-java-oracle-2.8.78.29-3.50.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-postgresql-2.8.78.29-3.50.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-java-postgresql-2.8.78.29-3.50.1.noarch"
        },
        "product_reference": "spacewalk-java-postgresql-2.8.78.29-3.50.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-taskomatic-2.8.78.29-3.50.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-taskomatic-2.8.78.29-3.50.1.noarch"
        },
        "product_reference": "spacewalk-taskomatic-2.8.78.29-3.50.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-utils-2.8.18.7-3.15.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:spacewalk-utils-2.8.18.7-3.15.1.noarch"
        },
        "product_reference": "spacewalk-utils-2.8.18.7-3.15.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-3.2.24-3.43.1.ppc64le as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.ppc64le"
        },
        "product_reference": "susemanager-3.2.24-3.43.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-3.2.24-3.43.1.s390x as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.s390x"
        },
        "product_reference": "susemanager-3.2.24-3.43.1.s390x",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-3.2.24-3.43.1.x86_64 as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.x86_64"
        },
        "product_reference": "susemanager-3.2.24-3.43.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-frontend-libs-3.2.5-3.13.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:susemanager-frontend-libs-3.2.5-3.13.1.noarch"
        },
        "product_reference": "susemanager-frontend-libs-3.2.5-3.13.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-retail-tools-1.0.1584363976.36bce64-2.12.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:susemanager-retail-tools-1.0.1584363976.36bce64-2.12.1.noarch"
        },
        "product_reference": "susemanager-retail-tools-1.0.1584363976.36bce64-2.12.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-schema-3.2.24-3.40.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:susemanager-schema-3.2.24-3.40.1.noarch"
        },
        "product_reference": "susemanager-schema-3.2.24-3.40.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-sls-3.2.31-3.47.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:susemanager-sls-3.2.31-3.47.1.noarch"
        },
        "product_reference": "susemanager-sls-3.2.31-3.47.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-tools-3.2.24-3.43.1.ppc64le as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.ppc64le"
        },
        "product_reference": "susemanager-tools-3.2.24-3.43.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-tools-3.2.24-3.43.1.s390x as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.s390x"
        },
        "product_reference": "susemanager-tools-3.2.24-3.43.1.s390x",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-tools-3.2.24-3.43.1.x86_64 as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.x86_64"
        },
        "product_reference": "susemanager-tools-3.2.24-3.43.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-web-libs-2.8.7.24-3.48.1.noarch as component of SUSE Manager Server 3.2",
          "product_id": "SUSE Manager Server 3.2:susemanager-web-libs-2.8.7.24-3.48.1.noarch"
        },
        "product_reference": "susemanager-web-libs-2.8.7.24-3.48.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-11022",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-11022"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery\u0027s DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Proxy 3.2:python2-spacewalk-check-2.8.22.8-3.15.1.noarch",
          "SUSE Manager Proxy 3.2:python2-spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
          "SUSE Manager Proxy 3.2:python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
          "SUSE Manager Proxy 3.2:python2-zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
          "SUSE Manager Proxy 3.2:release-notes-susemanager-proxy-3.2.15-0.16.47.1.x86_64",
          "SUSE Manager Proxy 3.2:spacewalk-backend-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Proxy 3.2:spacewalk-backend-libs-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Proxy 3.2:spacewalk-base-minimal-2.8.7.24-3.48.1.noarch",
          "SUSE Manager Proxy 3.2:spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch",
          "SUSE Manager Proxy 3.2:spacewalk-check-2.8.22.8-3.15.1.noarch",
          "SUSE Manager Proxy 3.2:spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
          "SUSE Manager Proxy 3.2:spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
          "SUSE Manager Proxy 3.2:spacewalk-proxy-installer-2.8.6.8-3.18.1.noarch",
          "SUSE Manager Proxy 3.2:susemanager-web-libs-2.8.7.24-3.48.1.noarch",
          "SUSE Manager Proxy 3.2:zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
          "SUSE Manager Server 3.2:bind-formula-0.1.1584363976.36bce64-3.6.1.noarch",
          "SUSE Manager Server 3.2:branch-network-formula-0.1.1584363976.36bce64-3.9.1.noarch",
          "SUSE Manager Server 3.2:py26-compat-salt-2016.11.10-6.38.1.noarch",
          "SUSE Manager Server 3.2:python-susemanager-retail-1.0.1584363976.36bce64-2.12.1.noarch",
          "SUSE Manager Server 3.2:python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
          "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.ppc64le",
          "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.s390x",
          "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.x86_64",
          "SUSE Manager Server 3.2:spacewalk-backend-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-app-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-applet-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-config-files-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-config-files-common-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-config-files-tool-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-iss-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-iss-export-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-libs-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-package-push-server-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-server-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-sql-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-sql-oracle-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-sql-postgresql-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-tools-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-xml-export-libs-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-backend-xmlrpc-2.8.57.23-3.51.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-base-2.8.7.24-3.48.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-base-minimal-2.8.7.24-3.48.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-html-2.8.7.24-3.48.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-java-2.8.78.29-3.50.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-java-config-2.8.78.29-3.50.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-java-lib-2.8.78.29-3.50.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-java-oracle-2.8.78.29-3.50.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-java-postgresql-2.8.78.29-3.50.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-taskomatic-2.8.78.29-3.50.1.noarch",
          "SUSE Manager Server 3.2:spacewalk-utils-2.8.18.7-3.15.1.noarch",
          "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.ppc64le",
          "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.s390x",
          "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.x86_64",
          "SUSE Manager Server 3.2:susemanager-frontend-libs-3.2.5-3.13.1.noarch",
          "SUSE Manager Server 3.2:susemanager-retail-tools-1.0.1584363976.36bce64-2.12.1.noarch",
          "SUSE Manager Server 3.2:susemanager-schema-3.2.24-3.40.1.noarch",
          "SUSE Manager Server 3.2:susemanager-sls-3.2.31-3.47.1.noarch",
          "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.ppc64le",
          "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.s390x",
          "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.x86_64",
          "SUSE Manager Server 3.2:susemanager-web-libs-2.8.7.24-3.48.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-11022",
          "url": "https://www.suse.com/security/cve/CVE-2020-11022"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173090 for CVE-2020-11022",
          "url": "https://bugzilla.suse.com/1173090"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178434 for CVE-2020-11022",
          "url": "https://bugzilla.suse.com/1178434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190663 for CVE-2020-11022",
          "url": "https://bugzilla.suse.com/1190663"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Proxy 3.2:python2-spacewalk-check-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:python2-spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:python2-zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
            "SUSE Manager Proxy 3.2:release-notes-susemanager-proxy-3.2.15-0.16.47.1.x86_64",
            "SUSE Manager Proxy 3.2:spacewalk-backend-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-backend-libs-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-base-minimal-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-check-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-proxy-installer-2.8.6.8-3.18.1.noarch",
            "SUSE Manager Proxy 3.2:susemanager-web-libs-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Proxy 3.2:zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
            "SUSE Manager Server 3.2:bind-formula-0.1.1584363976.36bce64-3.6.1.noarch",
            "SUSE Manager Server 3.2:branch-network-formula-0.1.1584363976.36bce64-3.9.1.noarch",
            "SUSE Manager Server 3.2:py26-compat-salt-2016.11.10-6.38.1.noarch",
            "SUSE Manager Server 3.2:python-susemanager-retail-1.0.1584363976.36bce64-2.12.1.noarch",
            "SUSE Manager Server 3.2:python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.ppc64le",
            "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.s390x",
            "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.x86_64",
            "SUSE Manager Server 3.2:spacewalk-backend-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-app-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-applet-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-config-files-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-config-files-common-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-config-files-tool-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-iss-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-iss-export-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-libs-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-package-push-server-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-server-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-sql-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-sql-oracle-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-sql-postgresql-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-tools-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-xml-export-libs-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-xmlrpc-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-base-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-base-minimal-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-html-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-java-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-java-config-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-java-lib-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-java-oracle-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-java-postgresql-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-taskomatic-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-utils-2.8.18.7-3.15.1.noarch",
            "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.ppc64le",
            "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.s390x",
            "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.x86_64",
            "SUSE Manager Server 3.2:susemanager-frontend-libs-3.2.5-3.13.1.noarch",
            "SUSE Manager Server 3.2:susemanager-retail-tools-1.0.1584363976.36bce64-2.12.1.noarch",
            "SUSE Manager Server 3.2:susemanager-schema-3.2.24-3.40.1.noarch",
            "SUSE Manager Server 3.2:susemanager-sls-3.2.31-3.47.1.noarch",
            "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.ppc64le",
            "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.s390x",
            "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.x86_64",
            "SUSE Manager Server 3.2:susemanager-web-libs-2.8.7.24-3.48.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Proxy 3.2:python2-spacewalk-check-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:python2-spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:python2-zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
            "SUSE Manager Proxy 3.2:release-notes-susemanager-proxy-3.2.15-0.16.47.1.x86_64",
            "SUSE Manager Proxy 3.2:spacewalk-backend-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-backend-libs-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-base-minimal-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-check-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-client-setup-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Proxy 3.2:spacewalk-proxy-installer-2.8.6.8-3.18.1.noarch",
            "SUSE Manager Proxy 3.2:susemanager-web-libs-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Proxy 3.2:zypp-plugin-spacewalk-1.0.7-3.13.1.noarch",
            "SUSE Manager Server 3.2:bind-formula-0.1.1584363976.36bce64-3.6.1.noarch",
            "SUSE Manager Server 3.2:branch-network-formula-0.1.1584363976.36bce64-3.9.1.noarch",
            "SUSE Manager Server 3.2:py26-compat-salt-2016.11.10-6.38.1.noarch",
            "SUSE Manager Server 3.2:python-susemanager-retail-1.0.1584363976.36bce64-2.12.1.noarch",
            "SUSE Manager Server 3.2:python2-spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.ppc64le",
            "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.s390x",
            "SUSE Manager Server 3.2:release-notes-susemanager-3.2.15-6.61.1.x86_64",
            "SUSE Manager Server 3.2:spacewalk-backend-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-app-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-applet-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-config-files-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-config-files-common-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-config-files-tool-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-iss-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-iss-export-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-libs-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-package-push-server-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-server-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-sql-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-sql-oracle-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-sql-postgresql-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-tools-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-xml-export-libs-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-backend-xmlrpc-2.8.57.23-3.51.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-base-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-base-minimal-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-base-minimal-config-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-client-tools-2.8.22.8-3.15.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-html-2.8.7.24-3.48.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-java-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-java-config-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-java-lib-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-java-oracle-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-java-postgresql-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-taskomatic-2.8.78.29-3.50.1.noarch",
            "SUSE Manager Server 3.2:spacewalk-utils-2.8.18.7-3.15.1.noarch",
            "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.ppc64le",
            "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.s390x",
            "SUSE Manager Server 3.2:susemanager-3.2.24-3.43.1.x86_64",
            "SUSE Manager Server 3.2:susemanager-frontend-libs-3.2.5-3.13.1.noarch",
            "SUSE Manager Server 3.2:susemanager-retail-tools-1.0.1584363976.36bce64-2.12.1.noarch",
            "SUSE Manager Server 3.2:susemanager-schema-3.2.24-3.40.1.noarch",
            "SUSE Manager Server 3.2:susemanager-sls-3.2.31-3.47.1.noarch",
            "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.ppc64le",
            "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.s390x",
            "SUSE Manager Server 3.2:susemanager-tools-3.2.24-3.43.1.x86_64",
            "SUSE Manager Server 3.2:susemanager-web-libs-2.8.7.24-3.48.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-08-21T12:32:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-11022"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for SUSE Manager Server 4.1",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update fixes the following issues:\n\ncobbler:\n\n- More old modules naming fixes (bsc#1169553)\n\nimage-sync-formula:\n\n- Allow image-sync state on regular minion.\n  Image sync state requires branch-network pillars to get the directory\n  where to sync images. Use default `/srv/saltboot` if that pillar is\n  missing so image-sync can be applied on non branch minions as well.\n\nmgr-libmod:\n\n- Remove unnecessary array wrap in \u0027list_modules\u0027 response object\n\nmgr-osad:\n\n- Move uyuni-base-common dependency from mgr-osad to mgr-osa-dispatcher\n  (bsc#1174405)\n\nopenvpn-formula:\n\n- Add hint that ssl certs must be on system (bsc#1172279)\n\npatterns-suse-manager:\n\n- Add Recommends for golang-github-QubitProducts-exporter_exporter\n\nprometheus-exporters-formula:\n\n- Bugfix: Handle exporters proxy for unsupported distros (bsc#1175555)\n- Add support for exporters proxy (exporter_exporter)\n\npxe-default-image-sle15:\n\n- Rollback the workaround for bsc#1172807, as dracut is now fixed\n\nsaltboot-formula:\n\n- Better fix for rounding errors (bsc#1136857)\n\nspacecmd:\n\n- Fix softwarechannel update for vendor channels (bsc#1172709)\n- Fix escaping of package names (bsc#1171281)\n\nspacewalk-backend:\n\n- Adds basic functionality for gpg check\n- Verify GPG signature of Ubuntu/Debian repository metadata (Release file)\n- Take care of SCC auth tokens on DEB repos GPG checks (bsc#1175485)\n- Use spacewalk keyring for GPG checks on DEB repos (bsc#1175485)\n\nspacewalk-branding:\n\n- Implement Maintenance Windows\n- Fix typo on spacewalk-branding license\n\nspacewalk-certs-tools:\n\n- Strip SSL Certificate Common Name after 63 Characters (bsc#1173535)\n- Fix centos detection (bsc#1173584)\n\nspacewalk-java:\n\n- Use media.1/products from media when not specified different (bsc#1175558)\n- Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831)\n- Fix error when rolling back a system to a snapshot (bsc#1173997)\n- Implement maintenance windows backend\n- Add check for maintainence window during executing recurring actions\n- Implement maintenance windows in struts\n- XMLRPC: Assign/retract maintenance schedule to/from systems\n- Fix softwarechannel update for vendor channels (bsc#1172709)\n- Avoid deadlock when syncing channels and registering minions at the same time (bsc#1173566)\n- Change system list header text to something better (bsc#1173982)\n- Set CPU and memory info for virtual instances (bsc#1170244)\n- Add virtual network Start, Stop and Delete actions\n- Add virtual network list page\n- Fix httpcomponents and gson jar symlinks (bsc#1174229)\n- Enhance RedHat product detection for CentOS and OracleLinux (bsc#1173584)\n- Provide comps.xml and modules.yaml when using onlinerepo for kickstart\n- Refresh virtualization pages only on events\n- Fix up2date detection on RH8 when salt-minion is used for registration\n- Improve performance of the System Groups page with many clients (bsc#1172839)\n- Include number of non-patch package updates to non-critical update counts\n  in system group pages (bsc#1170468)\n- Bump XMLRPC API version number to distinguish from Spacewalk 2.10\n- Cluster UI: return to overview page after scheduling actions\n- Fix NPE on auto installation when no kernel options are given (bsc#1173932)\n- Fix issue with disabling self_update for autoyast autoupgrade (bsc#1170654)\n- Adapt expectations for jobs return events after switching Salt\n  states to use \u0027mgrcompat.module_run\u0027 state.\n\nspacewalk-utils:\n\n- Add aarch64 for openSUSE Leap 15.1 and 15.2\n\nspacewalk-web:\n\n- Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831)\n- Fix JS linting errors/warnings\n- Enable Nutanix AHV virtual host gatherer.\n- Web UI: Implement managing maintenance schedules and calendars\n- Warn when a system is in multiple groups that configure the same\n  formula in the system formula\u0027s UI (bsc#1173554)\n- Add virtual network start, stop and delete actions\n- Add virtual network list page\n- Fix internal server error when creating module filters in CLM (bsc#1174325)\n- Fix VM creation page when there is no volume in the default storage pool\n- Refresh virtualization pages only on events\n- Product list in the Wizard doesn\u0027t show SLE products first (bsc#1173522)\n- Cluster UI: return to overview page after scheduling actions\n- Changes in the logic to update the tick icon.\n- For the postgres localhost:5432 case, use the\n- Fix internal server errors by returning 0 instead of dying\n- Add missing dependency to spacewalk-base-minimal (bsc#678126)\n- Change kickstart to autoinstallation in navigation on pxt pages\n- Debranding\n\nsuseRegisterInfo:\n\n- Enhance RedHat product detection for CentOS and OracleLinux (bsc#1173584)\n\nsusemanager:\n\n- Migrate all occurrences of kickstart to autoinstall in cobbler database (bsc#1169780)\n- Define bootstrap repo data for SUSE Manager Proxies (bsc#1174470)\n- Add SLE 15 LTSS Product ID to SLE15 bootstrap repositories, as\n  it is required to get python3-M2crypto (bsc#1174167)\n\nsusemanager-doc-indexes:\n\n- Left navigation structure cleaned up\n- Fixed several broken xrefs\n- Added hostname admonition for public cloud sections\n- Clarified Branch Proxy configuration instructions\n- Fixed index page pdf links, urls were 1 step to deep\n- SUSECOM 2020 branding update\n- PDF 2020 branding update\n- WEBUI 2020 branding update\n- Added maintenance window documentation\n- Added SLE client chapter\n- Added 508 compliance\n- Added reverse proxy information to Monitoring in Admin Guide\n- Add note about accessibility to index\n- In the Upgrade Guide, use Major, Minor, and Patch Level terminology for versioning.\n- Added docs for nutanix VHM\n- Ubuntu clients using the CLI in SUMA (bsc#1174025)\n\nsusemanager-docs_en:\n\n- Left navigation structure cleaned up\n- Fixed several broken xrefs\n- Added hostname admonition for public cloud sections\n- Clarified Branch Proxy configuration instructions\n- Fixed index page pdf links, urls were 1 step to deep\n- SUSECOM 2020 branding update\n- PDF 2020 branding update\n- WEBUI 2020 branding update\n- Added maintenance window documentation\n- Added SLE client chapter\n- Added 508 compliance\n- Added reverse proxy information to Monitoring in Admin Guide\n- Add note about accessibility to index \n- In the Upgrade Guide, use Major, Minor, and Patch Level terminology for versioning.\n- Added docs for nutanix VHM \n- Ubuntu clients using the CLI in SUMA (bsc#1174025)\n\nsusemanager-frontend-libs:\n\n- Upgrade jquery to 3.5.1 - CVE-2020-11022 (bsc#1172831)  \n\nsusemanager-schema:\n\n- Add new states and types for virtual instances in order\n  to support Nutanix AHV.\n- Implement Maintenance Windows\n- Add virtual network state change action\n- Internal fixes to avoid problems with the idempotency tests\n\nsusemanager-sls:\n\n- Fix the dnf plugin to add the token to the HTTP header (bsc#1175724)\n- Fix: supply a dnf base when dealing w/repos (bsc#1172504)\n- Fix: autorefresh in repos is zypper-only\n- Add virtual network state change state to handle start, stop and delete\n- Add virtual network state change state to handle start and stop\n- Fetch oracle-release when looking for RedHat Product Info (bsc#1173584)\n- Force a refresh after deleting a virtual storage volume\n- Prevent stuck Hardware Refresh actions on Salt 2016.11.10 based SSH minions (bsc#1173169)\n- Require PyYAML version \u003e= 5.1\n- Log out of Docker registries after image build (bsc#1165572)\n- Prevent \u0027module.run\u0027 deprecation warnings by using custom mgrcompat module\n\nsusemanager-sync-data:\n\n- Remove version from centos and oracle linux identifier (bsc#1173584)\n\nuyuni-common-libs:\n\n- Fix issues importing RPM packages with long RPM headers (bsc#1174965)\n\nvirtual-host-gatherer:\n\n- Add new gatherer module for Nutanix AHV.\n\nvirtualization-host-formula:\n\n- Ensure kernel-default and libvirt-python3 are installed\n- Set bridge network as default\n- Fix conditionals (bsc#1175791)\n\n\n\nyomi-formula:\n\n- Update to version 0.0.1+git.1595952633.b300be2:\n  * pillar: install always kernel-default\n  * chroot: python3-base is now a capability\n  * Move systemctl calls inside chroot\n  * Network: initial work for network declaration\n  * MicroOS: Remove tmp subvolume\n  * Update format following the new standard\n  * Fix __mount_device wrapper\n\nhttpcomponents-core:\n\n- Include the correct package in SUSE Manager Server (no source changes)\n\nhttpcomponents-client:\n\n- Include the correct package in SUSE Manager Server (no source changes)\n\ngoogle-gson:\n\n- Include the correct package in SUSE Manager Server (no source changes)\n\nHow to apply this update:\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\nspacewalk-service stop\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Upgrade the database schema:\nspacewalk-schema-upgrade\n5. Start the Spacewalk service:\nspacewalk-service start\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2020-2373,SUSE-SLE-Module-SUSE-Manager-Proxy-4.1-2020-2373,SUSE-SLE-Module-SUSE-Manager-Server-4.1-2020-2373",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2373-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2020:2373-1",
        "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20202373-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2020:2373-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-August/007314.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136857",
        "url": "https://bugzilla.suse.com/1136857"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165572",
        "url": "https://bugzilla.suse.com/1165572"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1169553",
        "url": "https://bugzilla.suse.com/1169553"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1169780",
        "url": "https://bugzilla.suse.com/1169780"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170244",
        "url": "https://bugzilla.suse.com/1170244"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170468",
        "url": "https://bugzilla.suse.com/1170468"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170654",
        "url": "https://bugzilla.suse.com/1170654"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171281",
        "url": "https://bugzilla.suse.com/1171281"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172279",
        "url": "https://bugzilla.suse.com/1172279"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172504",
        "url": "https://bugzilla.suse.com/1172504"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172709",
        "url": "https://bugzilla.suse.com/1172709"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172807",
        "url": "https://bugzilla.suse.com/1172807"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172831",
        "url": "https://bugzilla.suse.com/1172831"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172839",
        "url": "https://bugzilla.suse.com/1172839"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173169",
        "url": "https://bugzilla.suse.com/1173169"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173522",
        "url": "https://bugzilla.suse.com/1173522"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173535",
        "url": "https://bugzilla.suse.com/1173535"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173554",
        "url": "https://bugzilla.suse.com/1173554"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173566",
        "url": "https://bugzilla.suse.com/1173566"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173584",
        "url": "https://bugzilla.suse.com/1173584"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173932",
        "url": "https://bugzilla.suse.com/1173932"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173982",
        "url": "https://bugzilla.suse.com/1173982"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173997",
        "url": "https://bugzilla.suse.com/1173997"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174025",
        "url": "https://bugzilla.suse.com/1174025"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174167",
        "url": "https://bugzilla.suse.com/1174167"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174229",
        "url": "https://bugzilla.suse.com/1174229"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174325",
        "url": "https://bugzilla.suse.com/1174325"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174405",
        "url": "https://bugzilla.suse.com/1174405"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174470",
        "url": "https://bugzilla.suse.com/1174470"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174965",
        "url": "https://bugzilla.suse.com/1174965"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175485",
        "url": "https://bugzilla.suse.com/1175485"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175555",
        "url": "https://bugzilla.suse.com/1175555"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175558",
        "url": "https://bugzilla.suse.com/1175558"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175724",
        "url": "https://bugzilla.suse.com/1175724"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175791",
        "url": "https://bugzilla.suse.com/1175791"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 678126",
        "url": "https://bugzilla.suse.com/678126"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-11022 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-11022/"
      }
    ],
    "title": "Security update for SUSE Manager Server 4.1",
    "tracking": {
      "current_release_date": "2020-08-28T10:58:53Z",
      "generator": {
        "date": "2020-08-28T10:58:53Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2020:2373-1",
      "initial_release_date": "2020-08-28T10:58:53Z",
      "revision_history": [
        {
          "date": "2020-08-28T10:58:53Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "google-gson-2.8.5-3.2.6.noarch",
                "product": {
                  "name": "google-gson-2.8.5-3.2.6.noarch",
                  "product_id": "google-gson-2.8.5-3.2.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "google-gson-javadoc-2.8.5-3.2.6.noarch",
                "product": {
                  "name": "google-gson-javadoc-2.8.5-3.2.6.noarch",
                  "product_id": "google-gson-javadoc-2.8.5-3.2.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "httpcomponents-client-4.5.6-3.2.6.noarch",
                "product": {
                  "name": "httpcomponents-client-4.5.6-3.2.6.noarch",
                  "product_id": "httpcomponents-client-4.5.6-3.2.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "httpcomponents-client-cache-4.5.6-3.2.6.noarch",
                "product": {
                  "name": "httpcomponents-client-cache-4.5.6-3.2.6.noarch",
                  "product_id": "httpcomponents-client-cache-4.5.6-3.2.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "httpcomponents-client-javadoc-4.5.6-3.2.6.noarch",
                "product": {
                  "name": "httpcomponents-client-javadoc-4.5.6-3.2.6.noarch",
                  "product_id": "httpcomponents-client-javadoc-4.5.6-3.2.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "httpcomponents-core-4.4.10-3.2.6.noarch",
                "product": {
                  "name": "httpcomponents-core-4.4.10-3.2.6.noarch",
                  "product_id": "httpcomponents-core-4.4.10-3.2.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "httpcomponents-core-javadoc-4.4.10-3.2.6.noarch",
                "product": {
                  "name": "httpcomponents-core-javadoc-4.4.10-3.2.6.noarch",
                  "product_id": "httpcomponents-core-javadoc-4.4.10-3.2.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "pxe-default-image-sle15-4.1.0-Build5.3.noarch",
                "product": {
                  "name": "pxe-default-image-sle15-4.1.0-Build5.3.noarch",
                  "product_id": "pxe-default-image-sle15-4.1.0-Build5.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-osad-4.1.3-2.3.6.noarch",
                "product": {
                  "name": "mgr-osad-4.1.3-2.3.6.noarch",
                  "product_id": "mgr-osad-4.1.3-2.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-osa-common-4.1.3-2.3.6.noarch",
                "product": {
                  "name": "python3-mgr-osa-common-4.1.3-2.3.6.noarch",
                  "product_id": "python3-mgr-osa-common-4.1.3-2.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-osad-4.1.3-2.3.6.noarch",
                "product": {
                  "name": "python3-mgr-osad-4.1.3-2.3.6.noarch",
                  "product_id": "python3-mgr-osad-4.1.3-2.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch",
                "product": {
                  "name": "python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch",
                  "product_id": "python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-suseRegisterInfo-4.1.3-4.3.6.noarch",
                "product": {
                  "name": "python3-suseRegisterInfo-4.1.3-4.3.6.noarch",
                  "product_id": "python3-suseRegisterInfo-4.1.3-4.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacecmd-4.1.6-4.3.6.noarch",
                "product": {
                  "name": "spacecmd-4.1.6-4.3.6.noarch",
                  "product_id": "spacecmd-4.1.6-4.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-minimal-4.1.15-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-base-minimal-4.1.15-3.3.6.noarch",
                  "product_id": "spacewalk-base-minimal-4.1.15-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-minimal-config-4.1.15-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-base-minimal-config-4.1.15-3.3.6.noarch",
                  "product_id": "spacewalk-base-minimal-config-4.1.15-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-certs-tools-4.1.12-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-certs-tools-4.1.12-3.3.6.noarch",
                  "product_id": "spacewalk-certs-tools-4.1.12-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-broker-4.1.2-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-proxy-broker-4.1.2-3.3.6.noarch",
                  "product_id": "spacewalk-proxy-broker-4.1.2-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-common-4.1.2-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-proxy-common-4.1.2-3.3.6.noarch",
                  "product_id": "spacewalk-proxy-common-4.1.2-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-management-4.1.2-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-proxy-management-4.1.2-3.3.6.noarch",
                  "product_id": "spacewalk-proxy-management-4.1.2-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-package-manager-4.1.2-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-proxy-package-manager-4.1.2-3.3.6.noarch",
                  "product_id": "spacewalk-proxy-package-manager-4.1.2-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-redirect-4.1.2-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-proxy-redirect-4.1.2-3.3.6.noarch",
                  "product_id": "spacewalk-proxy-redirect-4.1.2-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-salt-4.1.2-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-proxy-salt-4.1.2-3.3.6.noarch",
                  "product_id": "spacewalk-proxy-salt-4.1.2-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "suseRegisterInfo-4.1.3-4.3.6.noarch",
                "product": {
                  "name": "suseRegisterInfo-4.1.3-4.3.6.noarch",
                  "product_id": "suseRegisterInfo-4.1.3-4.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "cobbler-3.0.0+git20190806.32c4bae0-5.3.6.noarch",
                "product": {
                  "name": "cobbler-3.0.0+git20190806.32c4bae0-5.3.6.noarch",
                  "product_id": "cobbler-3.0.0+git20190806.32c4bae0-5.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ical4j-3.0.18-3.2.7.noarch",
                "product": {
                  "name": "ical4j-3.0.18-3.2.7.noarch",
                  "product_id": "ical4j-3.0.18-3.2.7.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "image-sync-formula-0.1.1595937550.0285244-3.3.6.noarch",
                "product": {
                  "name": "image-sync-formula-0.1.1595937550.0285244-3.3.6.noarch",
                  "product_id": "image-sync-formula-0.1.1595937550.0285244-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-libmod-4.1.4-3.3.6.noarch",
                "product": {
                  "name": "mgr-libmod-4.1.4-3.3.6.noarch",
                  "product_id": "mgr-libmod-4.1.4-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
                "product": {
                  "name": "mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
                  "product_id": "mgr-osa-dispatcher-4.1.3-2.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "prometheus-exporters-formula-0.7.1-3.5.2.noarch",
                "product": {
                  "name": "prometheus-exporters-formula-0.7.1-3.5.2.noarch",
                  "product_id": "prometheus-exporters-formula-0.7.1-3.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
                "product": {
                  "name": "python3-mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
                  "product_id": "python3-mgr-osa-dispatcher-4.1.3-2.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "saltboot-formula-0.1.1595937550.0285244-3.3.6.noarch",
                "product": {
                  "name": "saltboot-formula-0.1.1595937550.0285244-3.3.6.noarch",
                  "product_id": "saltboot-formula-0.1.1595937550.0285244-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-app-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-app-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-app-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-applet-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-applet-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-applet-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-config-files-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-config-files-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-config-files-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-config-files-common-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-config-files-common-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-config-files-common-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-config-files-tool-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-config-files-tool-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-config-files-tool-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-iss-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-iss-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-iss-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-iss-export-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-iss-export-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-iss-export-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-package-push-server-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-package-push-server-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-package-push-server-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-server-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-server-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-server-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-sql-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-sql-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-sql-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-sql-postgresql-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-sql-postgresql-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-sql-postgresql-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-tools-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-tools-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-tools-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-xml-export-libs-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-xml-export-libs-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-xml-export-libs-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-xmlrpc-4.1.14-4.5.2.noarch",
                "product": {
                  "name": "spacewalk-backend-xmlrpc-4.1.14-4.5.2.noarch",
                  "product_id": "spacewalk-backend-xmlrpc-4.1.14-4.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-4.1.15-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-base-4.1.15-3.3.6.noarch",
                  "product_id": "spacewalk-base-4.1.15-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-html-4.1.15-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-html-4.1.15-3.3.6.noarch",
                  "product_id": "spacewalk-html-4.1.15-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-4.1.18-3.5.3.noarch",
                "product": {
                  "name": "spacewalk-java-4.1.18-3.5.3.noarch",
                  "product_id": "spacewalk-java-4.1.18-3.5.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-config-4.1.18-3.5.3.noarch",
                "product": {
                  "name": "spacewalk-java-config-4.1.18-3.5.3.noarch",
                  "product_id": "spacewalk-java-config-4.1.18-3.5.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-lib-4.1.18-3.5.3.noarch",
                "product": {
                  "name": "spacewalk-java-lib-4.1.18-3.5.3.noarch",
                  "product_id": "spacewalk-java-lib-4.1.18-3.5.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-postgresql-4.1.18-3.5.3.noarch",
                "product": {
                  "name": "spacewalk-java-postgresql-4.1.18-3.5.3.noarch",
                  "product_id": "spacewalk-java-postgresql-4.1.18-3.5.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-taskomatic-4.1.18-3.5.3.noarch",
                "product": {
                  "name": "spacewalk-taskomatic-4.1.18-3.5.3.noarch",
                  "product_id": "spacewalk-taskomatic-4.1.18-3.5.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-utils-4.1.11-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-utils-4.1.11-3.3.6.noarch",
                  "product_id": "spacewalk-utils-4.1.11-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-utils-extras-4.1.11-3.3.6.noarch",
                "product": {
                  "name": "spacewalk-utils-extras-4.1.11-3.3.6.noarch",
                  "product_id": "spacewalk-utils-extras-4.1.11-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-doc-indexes-4.1-11.7.2.noarch",
                "product": {
                  "name": "susemanager-doc-indexes-4.1-11.7.2.noarch",
                  "product_id": "susemanager-doc-indexes-4.1-11.7.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-docs_en-4.1-11.7.2.noarch",
                "product": {
                  "name": "susemanager-docs_en-4.1-11.7.2.noarch",
                  "product_id": "susemanager-docs_en-4.1-11.7.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-docs_en-pdf-4.1-11.7.2.noarch",
                "product": {
                  "name": "susemanager-docs_en-pdf-4.1-11.7.2.noarch",
                  "product_id": "susemanager-docs_en-pdf-4.1-11.7.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-frontend-libs-4.1.0-3.3.6.noarch",
                "product": {
                  "name": "susemanager-frontend-libs-4.1.0-3.3.6.noarch",
                  "product_id": "susemanager-frontend-libs-4.1.0-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-schema-4.1.12-3.3.6.noarch",
                "product": {
                  "name": "susemanager-schema-4.1.12-3.3.6.noarch",
                  "product_id": "susemanager-schema-4.1.12-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-sls-4.1.14-3.5.2.noarch",
                "product": {
                  "name": "susemanager-sls-4.1.14-3.5.2.noarch",
                  "product_id": "susemanager-sls-4.1.14-3.5.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-sync-data-4.1.7-3.3.6.noarch",
                "product": {
                  "name": "susemanager-sync-data-4.1.7-3.3.6.noarch",
                  "product_id": "susemanager-sync-data-4.1.7-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-web-libs-4.1.15-3.3.6.noarch",
                "product": {
                  "name": "susemanager-web-libs-4.1.15-3.3.6.noarch",
                  "product_id": "susemanager-web-libs-4.1.15-3.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "virtual-host-gatherer-1.0.21-4.3.6.noarch",
                "product": {
                  "name": "virtual-host-gatherer-1.0.21-4.3.6.noarch",
                  "product_id": "virtual-host-gatherer-1.0.21-4.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "virtual-host-gatherer-Kubernetes-1.0.21-4.3.6.noarch",
                "product": {
                  "name": "virtual-host-gatherer-Kubernetes-1.0.21-4.3.6.noarch",
                  "product_id": "virtual-host-gatherer-Kubernetes-1.0.21-4.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "virtual-host-gatherer-Nutanix-1.0.21-4.3.6.noarch",
                "product": {
                  "name": "virtual-host-gatherer-Nutanix-1.0.21-4.3.6.noarch",
                  "product_id": "virtual-host-gatherer-Nutanix-1.0.21-4.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "virtual-host-gatherer-VMware-1.0.21-4.3.6.noarch",
                "product": {
                  "name": "virtual-host-gatherer-VMware-1.0.21-4.3.6.noarch",
                  "product_id": "virtual-host-gatherer-VMware-1.0.21-4.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "virtual-host-gatherer-libcloud-1.0.21-4.3.6.noarch",
                "product": {
                  "name": "virtual-host-gatherer-libcloud-1.0.21-4.3.6.noarch",
                  "product_id": "virtual-host-gatherer-libcloud-1.0.21-4.3.6.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "virtualization-host-formula-0.5-3.3.1.noarch",
                "product": {
                  "name": "virtualization-host-formula-0.5-3.3.1.noarch",
                  "product_id": "virtualization-host-formula-0.5-3.3.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6.noarch",
                "product": {
                  "name": "yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6.noarch",
                  "product_id": "yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.ppc64le",
                "product": {
                  "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.ppc64le",
                  "product_id": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "openvpn-formula-0.1.1-3.3.6.ppc64le",
                "product": {
                  "name": "openvpn-formula-0.1.1-3.3.6.ppc64le",
                  "product_id": "openvpn-formula-0.1.1-3.3.6.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "patterns-suma_retail-4.1-6.3.6.ppc64le",
                "product": {
                  "name": "patterns-suma_retail-4.1-6.3.6.ppc64le",
                  "product_id": "patterns-suma_retail-4.1-6.3.6.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "patterns-suma_server-4.1-6.3.6.ppc64le",
                "product": {
                  "name": "patterns-suma_server-4.1-6.3.6.ppc64le",
                  "product_id": "patterns-suma_server-4.1-6.3.6.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "python3-uyuni-common-libs-4.1.6-3.3.6.ppc64le",
                "product": {
                  "name": "python3-uyuni-common-libs-4.1.6-3.3.6.ppc64le",
                  "product_id": "python3-uyuni-common-libs-4.1.6-3.3.6.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-branding-4.1.9-3.3.6.ppc64le",
                "product": {
                  "name": "spacewalk-branding-4.1.9-3.3.6.ppc64le",
                  "product_id": "spacewalk-branding-4.1.9-3.3.6.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-4.1.18-3.3.6.ppc64le",
                "product": {
                  "name": "susemanager-4.1.18-3.3.6.ppc64le",
                  "product_id": "susemanager-4.1.18-3.3.6.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-4.1.18-3.3.6.ppc64le",
                "product": {
                  "name": "susemanager-tools-4.1.18-3.3.6.ppc64le",
                  "product_id": "susemanager-tools-4.1.18-3.3.6.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.s390x",
                "product": {
                  "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.s390x",
                  "product_id": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openvpn-formula-0.1.1-3.3.6.s390x",
                "product": {
                  "name": "openvpn-formula-0.1.1-3.3.6.s390x",
                  "product_id": "openvpn-formula-0.1.1-3.3.6.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "patterns-suma_retail-4.1-6.3.6.s390x",
                "product": {
                  "name": "patterns-suma_retail-4.1-6.3.6.s390x",
                  "product_id": "patterns-suma_retail-4.1-6.3.6.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "patterns-suma_server-4.1-6.3.6.s390x",
                "product": {
                  "name": "patterns-suma_server-4.1-6.3.6.s390x",
                  "product_id": "patterns-suma_server-4.1-6.3.6.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python3-uyuni-common-libs-4.1.6-3.3.6.s390x",
                "product": {
                  "name": "python3-uyuni-common-libs-4.1.6-3.3.6.s390x",
                  "product_id": "python3-uyuni-common-libs-4.1.6-3.3.6.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-branding-4.1.9-3.3.6.s390x",
                "product": {
                  "name": "spacewalk-branding-4.1.9-3.3.6.s390x",
                  "product_id": "spacewalk-branding-4.1.9-3.3.6.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-4.1.18-3.3.6.s390x",
                "product": {
                  "name": "susemanager-4.1.18-3.3.6.s390x",
                  "product_id": "susemanager-4.1.18-3.3.6.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-4.1.18-3.3.6.s390x",
                "product": {
                  "name": "susemanager-tools-4.1.18-3.3.6.s390x",
                  "product_id": "susemanager-tools-4.1.18-3.3.6.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64",
                "product": {
                  "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64",
                  "product_id": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "patterns-suma_proxy-4.1-6.3.6.x86_64",
                "product": {
                  "name": "patterns-suma_proxy-4.1-6.3.6.x86_64",
                  "product_id": "patterns-suma_proxy-4.1-6.3.6.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-uyuni-common-libs-4.1.6-3.3.6.x86_64",
                "product": {
                  "name": "python3-uyuni-common-libs-4.1.6-3.3.6.x86_64",
                  "product_id": "python3-uyuni-common-libs-4.1.6-3.3.6.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openvpn-formula-0.1.1-3.3.6.x86_64",
                "product": {
                  "name": "openvpn-formula-0.1.1-3.3.6.x86_64",
                  "product_id": "openvpn-formula-0.1.1-3.3.6.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "patterns-suma_retail-4.1-6.3.6.x86_64",
                "product": {
                  "name": "patterns-suma_retail-4.1-6.3.6.x86_64",
                  "product_id": "patterns-suma_retail-4.1-6.3.6.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "patterns-suma_server-4.1-6.3.6.x86_64",
                "product": {
                  "name": "patterns-suma_server-4.1-6.3.6.x86_64",
                  "product_id": "patterns-suma_server-4.1-6.3.6.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-branding-4.1.9-3.3.6.x86_64",
                "product": {
                  "name": "spacewalk-branding-4.1.9-3.3.6.x86_64",
                  "product_id": "spacewalk-branding-4.1.9-3.3.6.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-4.1.18-3.3.6.x86_64",
                "product": {
                  "name": "susemanager-4.1.18-3.3.6.x86_64",
                  "product_id": "susemanager-4.1.18-3.3.6.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-4.1.18-3.3.6.x86_64",
                "product": {
                  "name": "susemanager-tools-4.1.18-3.3.6.x86_64",
                  "product_id": "susemanager-tools-4.1.18-3.3.6.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy Module 4.1",
                "product": {
                  "name": "SUSE Manager Proxy Module 4.1",
                  "product_id": "SUSE Manager Proxy Module 4.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-suse-manager-proxy:4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Server Module 4.1",
                "product": {
                  "name": "SUSE Manager Server Module 4.1",
                  "product_id": "SUSE Manager Server Module 4.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-suse-manager-server:4.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64 as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64"
        },
        "product_reference": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-osad-4.1.3-2.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:mgr-osad-4.1.3-2.3.6.noarch"
        },
        "product_reference": "mgr-osad-4.1.3-2.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "patterns-suma_proxy-4.1-6.3.6.x86_64 as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:patterns-suma_proxy-4.1-6.3.6.x86_64"
        },
        "product_reference": "patterns-suma_proxy-4.1-6.3.6.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-osa-common-4.1.3-2.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:python3-mgr-osa-common-4.1.3-2.3.6.noarch"
        },
        "product_reference": "python3-mgr-osa-common-4.1.3-2.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-osad-4.1.3-2.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:python3-mgr-osad-4.1.3-2.3.6.noarch"
        },
        "product_reference": "python3-mgr-osad-4.1.3-2.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch"
        },
        "product_reference": "python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-suseRegisterInfo-4.1.3-4.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:python3-suseRegisterInfo-4.1.3-4.3.6.noarch"
        },
        "product_reference": "python3-suseRegisterInfo-4.1.3-4.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-uyuni-common-libs-4.1.6-3.3.6.x86_64 as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.x86_64"
        },
        "product_reference": "python3-uyuni-common-libs-4.1.6-3.3.6.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacecmd-4.1.6-4.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:spacecmd-4.1.6-4.3.6.noarch"
        },
        "product_reference": "spacecmd-4.1.6-4.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-4.1.14-4.5.2.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:spacewalk-backend-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-4.1.15-3.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-4.1.15-3.3.6.noarch"
        },
        "product_reference": "spacewalk-base-minimal-4.1.15-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-config-4.1.15-3.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-config-4.1.15-3.3.6.noarch"
        },
        "product_reference": "spacewalk-base-minimal-config-4.1.15-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-certs-tools-4.1.12-3.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:spacewalk-certs-tools-4.1.12-3.3.6.noarch"
        },
        "product_reference": "spacewalk-certs-tools-4.1.12-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-broker-4.1.2-3.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:spacewalk-proxy-broker-4.1.2-3.3.6.noarch"
        },
        "product_reference": "spacewalk-proxy-broker-4.1.2-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-common-4.1.2-3.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:spacewalk-proxy-common-4.1.2-3.3.6.noarch"
        },
        "product_reference": "spacewalk-proxy-common-4.1.2-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-management-4.1.2-3.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:spacewalk-proxy-management-4.1.2-3.3.6.noarch"
        },
        "product_reference": "spacewalk-proxy-management-4.1.2-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-package-manager-4.1.2-3.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:spacewalk-proxy-package-manager-4.1.2-3.3.6.noarch"
        },
        "product_reference": "spacewalk-proxy-package-manager-4.1.2-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-redirect-4.1.2-3.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:spacewalk-proxy-redirect-4.1.2-3.3.6.noarch"
        },
        "product_reference": "spacewalk-proxy-redirect-4.1.2-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-salt-4.1.2-3.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:spacewalk-proxy-salt-4.1.2-3.3.6.noarch"
        },
        "product_reference": "spacewalk-proxy-salt-4.1.2-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "suseRegisterInfo-4.1.3-4.3.6.noarch as component of SUSE Manager Proxy Module 4.1",
          "product_id": "SUSE Manager Proxy Module 4.1:suseRegisterInfo-4.1.3-4.3.6.noarch"
        },
        "product_reference": "suseRegisterInfo-4.1.3-4.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cobbler-3.0.0+git20190806.32c4bae0-5.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:cobbler-3.0.0+git20190806.32c4bae0-5.3.6.noarch"
        },
        "product_reference": "cobbler-3.0.0+git20190806.32c4bae0-5.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.ppc64le as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.ppc64le"
        },
        "product_reference": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.s390x as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.s390x"
        },
        "product_reference": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.s390x",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64 as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64"
        },
        "product_reference": "golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "google-gson-2.8.5-3.2.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:google-gson-2.8.5-3.2.6.noarch"
        },
        "product_reference": "google-gson-2.8.5-3.2.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpcomponents-client-4.5.6-3.2.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:httpcomponents-client-4.5.6-3.2.6.noarch"
        },
        "product_reference": "httpcomponents-client-4.5.6-3.2.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpcomponents-core-4.4.10-3.2.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:httpcomponents-core-4.4.10-3.2.6.noarch"
        },
        "product_reference": "httpcomponents-core-4.4.10-3.2.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ical4j-3.0.18-3.2.7.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:ical4j-3.0.18-3.2.7.noarch"
        },
        "product_reference": "ical4j-3.0.18-3.2.7.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "image-sync-formula-0.1.1595937550.0285244-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:image-sync-formula-0.1.1595937550.0285244-3.3.6.noarch"
        },
        "product_reference": "image-sync-formula-0.1.1595937550.0285244-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-libmod-4.1.4-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:mgr-libmod-4.1.4-3.3.6.noarch"
        },
        "product_reference": "mgr-libmod-4.1.4-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-osa-dispatcher-4.1.3-2.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:mgr-osa-dispatcher-4.1.3-2.3.6.noarch"
        },
        "product_reference": "mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvpn-formula-0.1.1-3.3.6.ppc64le as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.ppc64le"
        },
        "product_reference": "openvpn-formula-0.1.1-3.3.6.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvpn-formula-0.1.1-3.3.6.s390x as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.s390x"
        },
        "product_reference": "openvpn-formula-0.1.1-3.3.6.s390x",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvpn-formula-0.1.1-3.3.6.x86_64 as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.x86_64"
        },
        "product_reference": "openvpn-formula-0.1.1-3.3.6.x86_64",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "patterns-suma_retail-4.1-6.3.6.ppc64le as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.ppc64le"
        },
        "product_reference": "patterns-suma_retail-4.1-6.3.6.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "patterns-suma_retail-4.1-6.3.6.s390x as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.s390x"
        },
        "product_reference": "patterns-suma_retail-4.1-6.3.6.s390x",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "patterns-suma_retail-4.1-6.3.6.x86_64 as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.x86_64"
        },
        "product_reference": "patterns-suma_retail-4.1-6.3.6.x86_64",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "patterns-suma_server-4.1-6.3.6.ppc64le as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.ppc64le"
        },
        "product_reference": "patterns-suma_server-4.1-6.3.6.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "patterns-suma_server-4.1-6.3.6.s390x as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.s390x"
        },
        "product_reference": "patterns-suma_server-4.1-6.3.6.s390x",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "patterns-suma_server-4.1-6.3.6.x86_64 as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.x86_64"
        },
        "product_reference": "patterns-suma_server-4.1-6.3.6.x86_64",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "prometheus-exporters-formula-0.7.1-3.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.7.1-3.5.2.noarch"
        },
        "product_reference": "prometheus-exporters-formula-0.7.1-3.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pxe-default-image-sle15-4.1.0-Build5.3.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:pxe-default-image-sle15-4.1.0-Build5.3.noarch"
        },
        "product_reference": "pxe-default-image-sle15-4.1.0-Build5.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-osa-common-4.1.3-2.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:python3-mgr-osa-common-4.1.3-2.3.6.noarch"
        },
        "product_reference": "python3-mgr-osa-common-4.1.3-2.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-osa-dispatcher-4.1.3-2.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:python3-mgr-osa-dispatcher-4.1.3-2.3.6.noarch"
        },
        "product_reference": "python3-mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch"
        },
        "product_reference": "python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-suseRegisterInfo-4.1.3-4.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:python3-suseRegisterInfo-4.1.3-4.3.6.noarch"
        },
        "product_reference": "python3-suseRegisterInfo-4.1.3-4.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-uyuni-common-libs-4.1.6-3.3.6.ppc64le as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.ppc64le"
        },
        "product_reference": "python3-uyuni-common-libs-4.1.6-3.3.6.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-uyuni-common-libs-4.1.6-3.3.6.s390x as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.s390x"
        },
        "product_reference": "python3-uyuni-common-libs-4.1.6-3.3.6.s390x",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-uyuni-common-libs-4.1.6-3.3.6.x86_64 as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.x86_64"
        },
        "product_reference": "python3-uyuni-common-libs-4.1.6-3.3.6.x86_64",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "saltboot-formula-0.1.1595937550.0285244-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:saltboot-formula-0.1.1595937550.0285244-3.3.6.noarch"
        },
        "product_reference": "saltboot-formula-0.1.1595937550.0285244-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacecmd-4.1.6-4.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacecmd-4.1.6-4.3.6.noarch"
        },
        "product_reference": "spacecmd-4.1.6-4.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-app-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-app-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-applet-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-applet-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-config-files-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-config-files-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-config-files-common-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-config-files-common-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-config-files-tool-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-config-files-tool-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-iss-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-iss-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-iss-export-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-iss-export-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-package-push-server-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-package-push-server-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-server-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-server-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-sql-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-sql-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-sql-postgresql-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-sql-postgresql-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-tools-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-tools-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-xml-export-libs-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-xml-export-libs-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-xmlrpc-4.1.14-4.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.14-4.5.2.noarch"
        },
        "product_reference": "spacewalk-backend-xmlrpc-4.1.14-4.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-4.1.15-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-base-4.1.15-3.3.6.noarch"
        },
        "product_reference": "spacewalk-base-4.1.15-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-4.1.15-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.15-3.3.6.noarch"
        },
        "product_reference": "spacewalk-base-minimal-4.1.15-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-config-4.1.15-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.15-3.3.6.noarch"
        },
        "product_reference": "spacewalk-base-minimal-config-4.1.15-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-branding-4.1.9-3.3.6.ppc64le as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.ppc64le"
        },
        "product_reference": "spacewalk-branding-4.1.9-3.3.6.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-branding-4.1.9-3.3.6.s390x as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.s390x"
        },
        "product_reference": "spacewalk-branding-4.1.9-3.3.6.s390x",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-branding-4.1.9-3.3.6.x86_64 as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.x86_64"
        },
        "product_reference": "spacewalk-branding-4.1.9-3.3.6.x86_64",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-certs-tools-4.1.12-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-certs-tools-4.1.12-3.3.6.noarch"
        },
        "product_reference": "spacewalk-certs-tools-4.1.12-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-html-4.1.15-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-html-4.1.15-3.3.6.noarch"
        },
        "product_reference": "spacewalk-html-4.1.15-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-4.1.18-3.5.3.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-java-4.1.18-3.5.3.noarch"
        },
        "product_reference": "spacewalk-java-4.1.18-3.5.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-config-4.1.18-3.5.3.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.18-3.5.3.noarch"
        },
        "product_reference": "spacewalk-java-config-4.1.18-3.5.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-lib-4.1.18-3.5.3.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.18-3.5.3.noarch"
        },
        "product_reference": "spacewalk-java-lib-4.1.18-3.5.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-postgresql-4.1.18-3.5.3.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.18-3.5.3.noarch"
        },
        "product_reference": "spacewalk-java-postgresql-4.1.18-3.5.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-taskomatic-4.1.18-3.5.3.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.18-3.5.3.noarch"
        },
        "product_reference": "spacewalk-taskomatic-4.1.18-3.5.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-utils-4.1.11-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.11-3.3.6.noarch"
        },
        "product_reference": "spacewalk-utils-4.1.11-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-utils-extras-4.1.11-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.11-3.3.6.noarch"
        },
        "product_reference": "spacewalk-utils-extras-4.1.11-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "suseRegisterInfo-4.1.3-4.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:suseRegisterInfo-4.1.3-4.3.6.noarch"
        },
        "product_reference": "suseRegisterInfo-4.1.3-4.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-4.1.18-3.3.6.ppc64le as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.ppc64le"
        },
        "product_reference": "susemanager-4.1.18-3.3.6.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-4.1.18-3.3.6.s390x as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.s390x"
        },
        "product_reference": "susemanager-4.1.18-3.3.6.s390x",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-4.1.18-3.3.6.x86_64 as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.x86_64"
        },
        "product_reference": "susemanager-4.1.18-3.3.6.x86_64",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-doc-indexes-4.1-11.7.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-11.7.2.noarch"
        },
        "product_reference": "susemanager-doc-indexes-4.1-11.7.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-docs_en-4.1-11.7.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-11.7.2.noarch"
        },
        "product_reference": "susemanager-docs_en-4.1-11.7.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-docs_en-pdf-4.1-11.7.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-11.7.2.noarch"
        },
        "product_reference": "susemanager-docs_en-pdf-4.1-11.7.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-frontend-libs-4.1.0-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-frontend-libs-4.1.0-3.3.6.noarch"
        },
        "product_reference": "susemanager-frontend-libs-4.1.0-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-schema-4.1.12-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-schema-4.1.12-3.3.6.noarch"
        },
        "product_reference": "susemanager-schema-4.1.12-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-sls-4.1.14-3.5.2.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-sls-4.1.14-3.5.2.noarch"
        },
        "product_reference": "susemanager-sls-4.1.14-3.5.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-sync-data-4.1.7-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-sync-data-4.1.7-3.3.6.noarch"
        },
        "product_reference": "susemanager-sync-data-4.1.7-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-tools-4.1.18-3.3.6.ppc64le as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.ppc64le"
        },
        "product_reference": "susemanager-tools-4.1.18-3.3.6.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-tools-4.1.18-3.3.6.s390x as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.s390x"
        },
        "product_reference": "susemanager-tools-4.1.18-3.3.6.s390x",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-tools-4.1.18-3.3.6.x86_64 as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.x86_64"
        },
        "product_reference": "susemanager-tools-4.1.18-3.3.6.x86_64",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-web-libs-4.1.15-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.15-3.3.6.noarch"
        },
        "product_reference": "susemanager-web-libs-4.1.15-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "virtual-host-gatherer-1.0.21-4.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:virtual-host-gatherer-1.0.21-4.3.6.noarch"
        },
        "product_reference": "virtual-host-gatherer-1.0.21-4.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "virtual-host-gatherer-Kubernetes-1.0.21-4.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:virtual-host-gatherer-Kubernetes-1.0.21-4.3.6.noarch"
        },
        "product_reference": "virtual-host-gatherer-Kubernetes-1.0.21-4.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "virtual-host-gatherer-Nutanix-1.0.21-4.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:virtual-host-gatherer-Nutanix-1.0.21-4.3.6.noarch"
        },
        "product_reference": "virtual-host-gatherer-Nutanix-1.0.21-4.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "virtual-host-gatherer-VMware-1.0.21-4.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:virtual-host-gatherer-VMware-1.0.21-4.3.6.noarch"
        },
        "product_reference": "virtual-host-gatherer-VMware-1.0.21-4.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "virtual-host-gatherer-libcloud-1.0.21-4.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:virtual-host-gatherer-libcloud-1.0.21-4.3.6.noarch"
        },
        "product_reference": "virtual-host-gatherer-libcloud-1.0.21-4.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "virtualization-host-formula-0.5-3.3.1.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:virtualization-host-formula-0.5-3.3.1.noarch"
        },
        "product_reference": "virtualization-host-formula-0.5-3.3.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6.noarch as component of SUSE Manager Server Module 4.1",
          "product_id": "SUSE Manager Server Module 4.1:yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6.noarch"
        },
        "product_reference": "yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-11022",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-11022"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery\u0027s DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Proxy Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64",
          "SUSE Manager Proxy Module 4.1:mgr-osad-4.1.3-2.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:patterns-suma_proxy-4.1-6.3.6.x86_64",
          "SUSE Manager Proxy Module 4.1:python3-mgr-osa-common-4.1.3-2.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:python3-mgr-osad-4.1.3-2.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:python3-suseRegisterInfo-4.1.3-4.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.x86_64",
          "SUSE Manager Proxy Module 4.1:spacecmd-4.1.6-4.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:spacewalk-backend-4.1.14-4.5.2.noarch",
          "SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-4.1.15-3.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-config-4.1.15-3.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:spacewalk-certs-tools-4.1.12-3.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:spacewalk-proxy-broker-4.1.2-3.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:spacewalk-proxy-common-4.1.2-3.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:spacewalk-proxy-management-4.1.2-3.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:spacewalk-proxy-package-manager-4.1.2-3.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:spacewalk-proxy-redirect-4.1.2-3.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:spacewalk-proxy-salt-4.1.2-3.3.6.noarch",
          "SUSE Manager Proxy Module 4.1:suseRegisterInfo-4.1.3-4.3.6.noarch",
          "SUSE Manager Server Module 4.1:cobbler-3.0.0+git20190806.32c4bae0-5.3.6.noarch",
          "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.ppc64le",
          "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.s390x",
          "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64",
          "SUSE Manager Server Module 4.1:google-gson-2.8.5-3.2.6.noarch",
          "SUSE Manager Server Module 4.1:httpcomponents-client-4.5.6-3.2.6.noarch",
          "SUSE Manager Server Module 4.1:httpcomponents-core-4.4.10-3.2.6.noarch",
          "SUSE Manager Server Module 4.1:ical4j-3.0.18-3.2.7.noarch",
          "SUSE Manager Server Module 4.1:image-sync-formula-0.1.1595937550.0285244-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:mgr-libmod-4.1.4-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
          "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.ppc64le",
          "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.s390x",
          "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.x86_64",
          "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.ppc64le",
          "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.s390x",
          "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.x86_64",
          "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.ppc64le",
          "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.s390x",
          "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.x86_64",
          "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.7.1-3.5.2.noarch",
          "SUSE Manager Server Module 4.1:pxe-default-image-sle15-4.1.0-Build5.3.noarch",
          "SUSE Manager Server Module 4.1:python3-mgr-osa-common-4.1.3-2.3.6.noarch",
          "SUSE Manager Server Module 4.1:python3-mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
          "SUSE Manager Server Module 4.1:python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:python3-suseRegisterInfo-4.1.3-4.3.6.noarch",
          "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.ppc64le",
          "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.s390x",
          "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.x86_64",
          "SUSE Manager Server Module 4.1:saltboot-formula-0.1.1595937550.0285244-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:spacecmd-4.1.6-4.3.6.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.14-4.5.2.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-base-4.1.15-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.15-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.15-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.ppc64le",
          "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.s390x",
          "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.x86_64",
          "SUSE Manager Server Module 4.1:spacewalk-certs-tools-4.1.12-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-html-4.1.15-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-java-4.1.18-3.5.3.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.18-3.5.3.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.18-3.5.3.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.18-3.5.3.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.18-3.5.3.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.11-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.11-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:suseRegisterInfo-4.1.3-4.3.6.noarch",
          "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.ppc64le",
          "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.s390x",
          "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.x86_64",
          "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-11.7.2.noarch",
          "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-11.7.2.noarch",
          "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-11.7.2.noarch",
          "SUSE Manager Server Module 4.1:susemanager-frontend-libs-4.1.0-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:susemanager-schema-4.1.12-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:susemanager-sls-4.1.14-3.5.2.noarch",
          "SUSE Manager Server Module 4.1:susemanager-sync-data-4.1.7-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.ppc64le",
          "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.s390x",
          "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.x86_64",
          "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.15-3.3.6.noarch",
          "SUSE Manager Server Module 4.1:virtual-host-gatherer-1.0.21-4.3.6.noarch",
          "SUSE Manager Server Module 4.1:virtual-host-gatherer-Kubernetes-1.0.21-4.3.6.noarch",
          "SUSE Manager Server Module 4.1:virtual-host-gatherer-Nutanix-1.0.21-4.3.6.noarch",
          "SUSE Manager Server Module 4.1:virtual-host-gatherer-VMware-1.0.21-4.3.6.noarch",
          "SUSE Manager Server Module 4.1:virtual-host-gatherer-libcloud-1.0.21-4.3.6.noarch",
          "SUSE Manager Server Module 4.1:virtualization-host-formula-0.5-3.3.1.noarch",
          "SUSE Manager Server Module 4.1:yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-11022",
          "url": "https://www.suse.com/security/cve/CVE-2020-11022"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173090 for CVE-2020-11022",
          "url": "https://bugzilla.suse.com/1173090"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178434 for CVE-2020-11022",
          "url": "https://bugzilla.suse.com/1178434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190663 for CVE-2020-11022",
          "url": "https://bugzilla.suse.com/1190663"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Proxy Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64",
            "SUSE Manager Proxy Module 4.1:mgr-osad-4.1.3-2.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:patterns-suma_proxy-4.1-6.3.6.x86_64",
            "SUSE Manager Proxy Module 4.1:python3-mgr-osa-common-4.1.3-2.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:python3-mgr-osad-4.1.3-2.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:python3-suseRegisterInfo-4.1.3-4.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.x86_64",
            "SUSE Manager Proxy Module 4.1:spacecmd-4.1.6-4.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-backend-4.1.14-4.5.2.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-4.1.15-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-config-4.1.15-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-certs-tools-4.1.12-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-broker-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-common-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-management-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-package-manager-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-redirect-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-salt-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:suseRegisterInfo-4.1.3-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:cobbler-3.0.0+git20190806.32c4bae0-5.3.6.noarch",
            "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.s390x",
            "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64",
            "SUSE Manager Server Module 4.1:google-gson-2.8.5-3.2.6.noarch",
            "SUSE Manager Server Module 4.1:httpcomponents-client-4.5.6-3.2.6.noarch",
            "SUSE Manager Server Module 4.1:httpcomponents-core-4.4.10-3.2.6.noarch",
            "SUSE Manager Server Module 4.1:ical4j-3.0.18-3.2.7.noarch",
            "SUSE Manager Server Module 4.1:image-sync-formula-0.1.1595937550.0285244-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:mgr-libmod-4.1.4-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
            "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.s390x",
            "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.x86_64",
            "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.s390x",
            "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.x86_64",
            "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.s390x",
            "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.x86_64",
            "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.7.1-3.5.2.noarch",
            "SUSE Manager Server Module 4.1:pxe-default-image-sle15-4.1.0-Build5.3.noarch",
            "SUSE Manager Server Module 4.1:python3-mgr-osa-common-4.1.3-2.3.6.noarch",
            "SUSE Manager Server Module 4.1:python3-mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
            "SUSE Manager Server Module 4.1:python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:python3-suseRegisterInfo-4.1.3-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.s390x",
            "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.x86_64",
            "SUSE Manager Server Module 4.1:saltboot-formula-0.1.1595937550.0285244-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacecmd-4.1.6-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-base-4.1.15-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.15-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.15-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.s390x",
            "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.x86_64",
            "SUSE Manager Server Module 4.1:spacewalk-certs-tools-4.1.12-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-html-4.1.15-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-java-4.1.18-3.5.3.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.18-3.5.3.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.18-3.5.3.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.18-3.5.3.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.18-3.5.3.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.11-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.11-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:suseRegisterInfo-4.1.3-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.s390x",
            "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.x86_64",
            "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-11.7.2.noarch",
            "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-11.7.2.noarch",
            "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-11.7.2.noarch",
            "SUSE Manager Server Module 4.1:susemanager-frontend-libs-4.1.0-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:susemanager-schema-4.1.12-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:susemanager-sls-4.1.14-3.5.2.noarch",
            "SUSE Manager Server Module 4.1:susemanager-sync-data-4.1.7-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.s390x",
            "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.x86_64",
            "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.15-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtual-host-gatherer-1.0.21-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtual-host-gatherer-Kubernetes-1.0.21-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtual-host-gatherer-Nutanix-1.0.21-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtual-host-gatherer-VMware-1.0.21-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtual-host-gatherer-libcloud-1.0.21-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtualization-host-formula-0.5-3.3.1.noarch",
            "SUSE Manager Server Module 4.1:yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Proxy Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64",
            "SUSE Manager Proxy Module 4.1:mgr-osad-4.1.3-2.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:patterns-suma_proxy-4.1-6.3.6.x86_64",
            "SUSE Manager Proxy Module 4.1:python3-mgr-osa-common-4.1.3-2.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:python3-mgr-osad-4.1.3-2.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:python3-suseRegisterInfo-4.1.3-4.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.x86_64",
            "SUSE Manager Proxy Module 4.1:spacecmd-4.1.6-4.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-backend-4.1.14-4.5.2.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-4.1.15-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-config-4.1.15-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-certs-tools-4.1.12-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-broker-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-common-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-management-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-package-manager-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-redirect-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:spacewalk-proxy-salt-4.1.2-3.3.6.noarch",
            "SUSE Manager Proxy Module 4.1:suseRegisterInfo-4.1.3-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:cobbler-3.0.0+git20190806.32c4bae0-5.3.6.noarch",
            "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.s390x",
            "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6.x86_64",
            "SUSE Manager Server Module 4.1:google-gson-2.8.5-3.2.6.noarch",
            "SUSE Manager Server Module 4.1:httpcomponents-client-4.5.6-3.2.6.noarch",
            "SUSE Manager Server Module 4.1:httpcomponents-core-4.4.10-3.2.6.noarch",
            "SUSE Manager Server Module 4.1:ical4j-3.0.18-3.2.7.noarch",
            "SUSE Manager Server Module 4.1:image-sync-formula-0.1.1595937550.0285244-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:mgr-libmod-4.1.4-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
            "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.s390x",
            "SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6.x86_64",
            "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.s390x",
            "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6.x86_64",
            "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.s390x",
            "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6.x86_64",
            "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.7.1-3.5.2.noarch",
            "SUSE Manager Server Module 4.1:pxe-default-image-sle15-4.1.0-Build5.3.noarch",
            "SUSE Manager Server Module 4.1:python3-mgr-osa-common-4.1.3-2.3.6.noarch",
            "SUSE Manager Server Module 4.1:python3-mgr-osa-dispatcher-4.1.3-2.3.6.noarch",
            "SUSE Manager Server Module 4.1:python3-spacewalk-certs-tools-4.1.12-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:python3-suseRegisterInfo-4.1.3-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.s390x",
            "SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6.x86_64",
            "SUSE Manager Server Module 4.1:saltboot-formula-0.1.1595937550.0285244-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacecmd-4.1.6-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.14-4.5.2.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-base-4.1.15-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.15-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.15-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.s390x",
            "SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6.x86_64",
            "SUSE Manager Server Module 4.1:spacewalk-certs-tools-4.1.12-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-html-4.1.15-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-java-4.1.18-3.5.3.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.18-3.5.3.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.18-3.5.3.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.18-3.5.3.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.18-3.5.3.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.11-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.11-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:suseRegisterInfo-4.1.3-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.s390x",
            "SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6.x86_64",
            "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-11.7.2.noarch",
            "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-11.7.2.noarch",
            "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-11.7.2.noarch",
            "SUSE Manager Server Module 4.1:susemanager-frontend-libs-4.1.0-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:susemanager-schema-4.1.12-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:susemanager-sls-4.1.14-3.5.2.noarch",
            "SUSE Manager Server Module 4.1:susemanager-sync-data-4.1.7-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.ppc64le",
            "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.s390x",
            "SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6.x86_64",
            "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.15-3.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtual-host-gatherer-1.0.21-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtual-host-gatherer-Kubernetes-1.0.21-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtual-host-gatherer-Nutanix-1.0.21-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtual-host-gatherer-VMware-1.0.21-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtual-host-gatherer-libcloud-1.0.21-4.3.6.noarch",
            "SUSE Manager Server Module 4.1:virtualization-host-formula-0.5-3.3.1.noarch",
            "SUSE Manager Server Module 4.1:yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-08-28T10:58:53Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-11022"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for SUSE Manager Server 4.0",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update fixes the following issues:\n\nhibernate5:\n\n- Address CVE-2019-14900 (bsc#1172079)\n\nimage-sync-formula:\n\n- Allow image-sync state on regular minion.\n  Image sync state requires branch-network pillars to get the directory\n  where to sync images. Use default `/srv/saltboot` if that pillar is\n  missing so image-sync can be applied on non branch minions as well.\n\nopenvpn-formula:\n\n- Add hint that ssl certs must be on system (bsc#1172279)\n\nprometheus-exporters-formula:\n\n- Bugfix: Handle exporters proxy for unsupported distros (bsc#1175555)\n- Add support for exporters proxy (exporter_exporter)\n- Update the apache exporter config file for Debian\n\nsalt-netapi-client:\n\n- Refresh authentication module list to newer Salt versions\n\nsaltboot-formula:\n\n- Better fix for rounding errors (bsc#1136857)\n\nspacecmd:\n\n- Python3 fixes for errata in spacecmd (bsc#1169664)\n- Python3 fix for sorted usage (bsc#1167907)\n- Fix softwarechannel_listlatestpackages throwing error on empty channels (bsc#1175889)\n- Fix escaping of package names (bsc#1171281)\n\nspacewalk-admin:\n\n- Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)\n\nspacewalk-certs-tools:\n\n- Add option --nostricthostkeychecking to spacewalk-ssh-push-init\n- Strip SSL Certificate Common Name after 63 Characters (bsc#1173535)\n\nspacewalk-java:\n\n- Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)\n- Fix EntityExistsException on migration from traditional to salt minion via proxy (bsc#1175556)\n- Use media.1/products from media when not specified different (bsc#1175558)\n- Fix: use quiet API method when using spacewalk-common-channels (bsc#1175529)\n- Fix alignment on icon on entitlement page\n- Reset the server path on minion registration (bsc#1174254)\n- Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831)\n- Fix error when rolling back a system to a snapshot (bsc#1173997)\n- Avoid deadlock when syncing channels and registering minions at the same time (bsc#1173566)\n- Provide comps.xml and modules.yaml when using onlinerepo for kickstart\n- Set CPU and memory info for virtual instances (bsc#1170244)\n- Change system list header text to something better (bsc#1173982)\n\nspacewalk-setup:\n\n- Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)\n\nspacewalk-utils:\n\n- Avoid exceptions on the logs when looking for channels that do\n  not exist (bsc#1175529)\n\nspacewalk-web:\n\n- Fix login page after jQuery upgrade (bsc#1175224)\n- Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831)\n- Warn when a system is in multiple groups that configure the same\n  formula in the system formula\u0027s UI (bsc#1173554)\n\nsusemanager:\n\n- Define bootstrap repo data for SUSE Manager Proxies (bsc#1174470)\n\nsusemanager-frontend-libs:\n\n- Upgrade jquery to 3.5.1 - CVE-2020-11022 (bsc#1172831) \n\nsusemanager-schema:\n\n- Prevent a deadlock error involving delete_server and update_needed_cache (bsc#1173073)\n\nsusemanager-sls:\n\n- Fix the dnf plugin to add the token to the HTTP header (bsc#1175724)\n- Fix reporting of missing products in product.all_installed (bsc#1165829)\n- Require PyYAML version \u003e= 5.1\n- Get redhat-release only when it is not a symlink\n- Fix: supply a dnf base when dealing w/repos (bsc#1172504)\n- Fix: autorefresh in repos is zypper-only\n\nsusemanager-sync-data:\n\n- Remove version from centos and oracle linux identifier (bsc#1173584)\n\nvirtualization-host-formula:\n\n- Update to version 0.5\n  - Ensure kernel-default and libvirt-python3 are installed\n  - Set bridge network as default\n  - Fix conditionals (bsc#1175791)\n\nHow to apply this update:\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\nspacewalk-service stop\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Upgrade the database schema:\nspacewalk-schema-upgrade\n5. Start the Spacewalk service:\nspacewalk-service start\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2020-2650,SUSE-SLE-Module-SUSE-Manager-Proxy-4.0-2020-2650,SUSE-SLE-Module-SUSE-Manager-Server-4.0-2020-2650",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2650-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2020:2650-1",
        "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20202650-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2020:2650-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-September/007435.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136857",
        "url": "https://bugzilla.suse.com/1136857"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165829",
        "url": "https://bugzilla.suse.com/1165829"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167907",
        "url": "https://bugzilla.suse.com/1167907"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1169664",
        "url": "https://bugzilla.suse.com/1169664"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170244",
        "url": "https://bugzilla.suse.com/1170244"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171281",
        "url": "https://bugzilla.suse.com/1171281"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172079",
        "url": "https://bugzilla.suse.com/1172079"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172279",
        "url": "https://bugzilla.suse.com/1172279"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172504",
        "url": "https://bugzilla.suse.com/1172504"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172831",
        "url": "https://bugzilla.suse.com/1172831"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173073",
        "url": "https://bugzilla.suse.com/1173073"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173535",
        "url": "https://bugzilla.suse.com/1173535"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173554",
        "url": "https://bugzilla.suse.com/1173554"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173566",
        "url": "https://bugzilla.suse.com/1173566"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173584",
        "url": "https://bugzilla.suse.com/1173584"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173982",
        "url": "https://bugzilla.suse.com/1173982"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173997",
        "url": "https://bugzilla.suse.com/1173997"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174254",
        "url": "https://bugzilla.suse.com/1174254"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174470",
        "url": "https://bugzilla.suse.com/1174470"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175224",
        "url": "https://bugzilla.suse.com/1175224"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175529",
        "url": "https://bugzilla.suse.com/1175529"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175555",
        "url": "https://bugzilla.suse.com/1175555"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175556",
        "url": "https://bugzilla.suse.com/1175556"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175558",
        "url": "https://bugzilla.suse.com/1175558"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175724",
        "url": "https://bugzilla.suse.com/1175724"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175791",
        "url": "https://bugzilla.suse.com/1175791"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175884",
        "url": "https://bugzilla.suse.com/1175884"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175889",
        "url": "https://bugzilla.suse.com/1175889"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-14900 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-14900/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-11022 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-11022/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-8028 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-8028/"
      }
    ],
    "title": "Security update for SUSE Manager Server 4.0",
    "tracking": {
      "current_release_date": "2020-09-16T12:24:27Z",
      "generator": {
        "date": "2020-09-16T12:24:27Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2020:2650-1",
      "initial_release_date": "2020-09-16T12:24:27Z",
      "revision_history": [
        {
          "date": "2020-09-16T12:24:27Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openvpn-formula-0.1.1-4.6.2.aarch64",
                "product": {
                  "name": "openvpn-formula-0.1.1-4.6.2.aarch64",
                  "product_id": "openvpn-formula-0.1.1-4.6.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-4.0.28-3.36.3.aarch64",
                "product": {
                  "name": "susemanager-4.0.28-3.36.3.aarch64",
                  "product_id": "susemanager-4.0.28-3.36.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-4.0.28-3.36.3.aarch64",
                "product": {
                  "name": "susemanager-tools-4.0.28-3.36.3.aarch64",
                  "product_id": "susemanager-tools-4.0.28-3.36.3.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "hibernate5-5.3.7-4.3.2.noarch",
                "product": {
                  "name": "hibernate5-5.3.7-4.3.2.noarch",
                  "product_id": "hibernate5-5.3.7-4.3.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
                "product": {
                  "name": "image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
                  "product_id": "image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "prometheus-exporters-formula-0.7.1-3.10.2.noarch",
                "product": {
                  "name": "prometheus-exporters-formula-0.7.1-3.10.2.noarch",
                  "product_id": "prometheus-exporters-formula-0.7.1-3.10.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
                "product": {
                  "name": "python2-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
                  "product_id": "python2-spacewalk-certs-tools-4.0.17-3.21.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
                "product": {
                  "name": "python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
                  "product_id": "python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "salt-netapi-client-0.17.0-4.6.3.noarch",
                "product": {
                  "name": "salt-netapi-client-0.17.0-4.6.3.noarch",
                  "product_id": "salt-netapi-client-0.17.0-4.6.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
                "product": {
                  "name": "saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
                  "product_id": "saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacecmd-4.0.20-3.19.2.noarch",
                "product": {
                  "name": "spacecmd-4.0.20-3.19.2.noarch",
                  "product_id": "spacecmd-4.0.20-3.19.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-admin-4.0.11-3.12.1.noarch",
                "product": {
                  "name": "spacewalk-admin-4.0.11-3.12.1.noarch",
                  "product_id": "spacewalk-admin-4.0.11-3.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-4.0.23-3.30.3.noarch",
                "product": {
                  "name": "spacewalk-base-4.0.23-3.30.3.noarch",
                  "product_id": "spacewalk-base-4.0.23-3.30.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-minimal-4.0.23-3.30.3.noarch",
                "product": {
                  "name": "spacewalk-base-minimal-4.0.23-3.30.3.noarch",
                  "product_id": "spacewalk-base-minimal-4.0.23-3.30.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
                "product": {
                  "name": "spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
                  "product_id": "spacewalk-base-minimal-config-4.0.23-3.30.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-certs-tools-4.0.17-3.21.3.noarch",
                "product": {
                  "name": "spacewalk-certs-tools-4.0.17-3.21.3.noarch",
                  "product_id": "spacewalk-certs-tools-4.0.17-3.21.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-dobby-4.0.23-3.30.3.noarch",
                "product": {
                  "name": "spacewalk-dobby-4.0.23-3.30.3.noarch",
                  "product_id": "spacewalk-dobby-4.0.23-3.30.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-html-4.0.23-3.30.3.noarch",
                "product": {
                  "name": "spacewalk-html-4.0.23-3.30.3.noarch",
                  "product_id": "spacewalk-html-4.0.23-3.30.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-4.0.37-3.39.1.noarch",
                "product": {
                  "name": "spacewalk-java-4.0.37-3.39.1.noarch",
                  "product_id": "spacewalk-java-4.0.37-3.39.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-apidoc-sources-4.0.37-3.39.1.noarch",
                "product": {
                  "name": "spacewalk-java-apidoc-sources-4.0.37-3.39.1.noarch",
                  "product_id": "spacewalk-java-apidoc-sources-4.0.37-3.39.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-config-4.0.37-3.39.1.noarch",
                "product": {
                  "name": "spacewalk-java-config-4.0.37-3.39.1.noarch",
                  "product_id": "spacewalk-java-config-4.0.37-3.39.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-lib-4.0.37-3.39.1.noarch",
                "product": {
                  "name": "spacewalk-java-lib-4.0.37-3.39.1.noarch",
                  "product_id": "spacewalk-java-lib-4.0.37-3.39.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
                "product": {
                  "name": "spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
                  "product_id": "spacewalk-java-postgresql-4.0.37-3.39.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
                "product": {
                  "name": "spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
                  "product_id": "spacewalk-proxy-broker-4.0.14-3.10.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-common-4.0.14-3.10.3.noarch",
                "product": {
                  "name": "spacewalk-proxy-common-4.0.14-3.10.3.noarch",
                  "product_id": "spacewalk-proxy-common-4.0.14-3.10.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-management-4.0.14-3.10.3.noarch",
                "product": {
                  "name": "spacewalk-proxy-management-4.0.14-3.10.3.noarch",
                  "product_id": "spacewalk-proxy-management-4.0.14-3.10.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
                "product": {
                  "name": "spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
                  "product_id": "spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
                "product": {
                  "name": "spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
                  "product_id": "spacewalk-proxy-redirect-4.0.14-3.10.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
                "product": {
                  "name": "spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
                  "product_id": "spacewalk-proxy-salt-4.0.14-3.10.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-setup-4.0.14-3.14.1.noarch",
                "product": {
                  "name": "spacewalk-setup-4.0.14-3.14.1.noarch",
                  "product_id": "spacewalk-setup-4.0.14-3.14.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-taskomatic-4.0.37-3.39.1.noarch",
                "product": {
                  "name": "spacewalk-taskomatic-4.0.37-3.39.1.noarch",
                  "product_id": "spacewalk-taskomatic-4.0.37-3.39.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-utils-4.0.18-3.21.3.noarch",
                "product": {
                  "name": "spacewalk-utils-4.0.18-3.21.3.noarch",
                  "product_id": "spacewalk-utils-4.0.18-3.21.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-frontend-libs-4.0.2-4.3.2.noarch",
                "product": {
                  "name": "susemanager-frontend-libs-4.0.2-4.3.2.noarch",
                  "product_id": "susemanager-frontend-libs-4.0.2-4.3.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-frontend-libs-devel-4.0.2-4.3.2.noarch",
                "product": {
                  "name": "susemanager-frontend-libs-devel-4.0.2-4.3.2.noarch",
                  "product_id": "susemanager-frontend-libs-devel-4.0.2-4.3.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-schema-4.0.22-3.29.2.noarch",
                "product": {
                  "name": "susemanager-schema-4.0.22-3.29.2.noarch",
                  "product_id": "susemanager-schema-4.0.22-3.29.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-schema-sanity-4.0.22-3.29.2.noarch",
                "product": {
                  "name": "susemanager-schema-sanity-4.0.22-3.29.2.noarch",
                  "product_id": "susemanager-schema-sanity-4.0.22-3.29.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-sls-4.0.29-3.31.3.noarch",
                "product": {
                  "name": "susemanager-sls-4.0.29-3.31.3.noarch",
                  "product_id": "susemanager-sls-4.0.29-3.31.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-sync-data-4.0.18-3.24.2.noarch",
                "product": {
                  "name": "susemanager-sync-data-4.0.18-3.24.2.noarch",
                  "product_id": "susemanager-sync-data-4.0.18-3.24.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-web-libs-4.0.23-3.30.3.noarch",
                "product": {
                  "name": "susemanager-web-libs-4.0.23-3.30.3.noarch",
                  "product_id": "susemanager-web-libs-4.0.23-3.30.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "virtualization-host-formula-0.5-4.12.3.noarch",
                "product": {
                  "name": "virtualization-host-formula-0.5-4.12.3.noarch",
                  "product_id": "virtualization-host-formula-0.5-4.12.3.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openvpn-formula-0.1.1-4.6.2.ppc64le",
                "product": {
                  "name": "openvpn-formula-0.1.1-4.6.2.ppc64le",
                  "product_id": "openvpn-formula-0.1.1-4.6.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-4.0.28-3.36.3.ppc64le",
                "product": {
                  "name": "susemanager-4.0.28-3.36.3.ppc64le",
                  "product_id": "susemanager-4.0.28-3.36.3.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-4.0.28-3.36.3.ppc64le",
                "product": {
                  "name": "susemanager-tools-4.0.28-3.36.3.ppc64le",
                  "product_id": "susemanager-tools-4.0.28-3.36.3.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openvpn-formula-0.1.1-4.6.2.s390x",
                "product": {
                  "name": "openvpn-formula-0.1.1-4.6.2.s390x",
                  "product_id": "openvpn-formula-0.1.1-4.6.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-4.0.28-3.36.3.s390x",
                "product": {
                  "name": "susemanager-4.0.28-3.36.3.s390x",
                  "product_id": "susemanager-4.0.28-3.36.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-4.0.28-3.36.3.s390x",
                "product": {
                  "name": "susemanager-tools-4.0.28-3.36.3.s390x",
                  "product_id": "susemanager-tools-4.0.28-3.36.3.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "hibernate5-kit-06f89f5f40a0b95b08f814879026e8ce444876e5-3.3.1.x86_64",
                "product": {
                  "name": "hibernate5-kit-06f89f5f40a0b95b08f814879026e8ce444876e5-3.3.1.x86_64",
                  "product_id": "hibernate5-kit-06f89f5f40a0b95b08f814879026e8ce444876e5-3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openvpn-formula-0.1.1-4.6.2.x86_64",
                "product": {
                  "name": "openvpn-formula-0.1.1-4.6.2.x86_64",
                  "product_id": "openvpn-formula-0.1.1-4.6.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-4.0.28-3.36.3.x86_64",
                "product": {
                  "name": "susemanager-4.0.28-3.36.3.x86_64",
                  "product_id": "susemanager-4.0.28-3.36.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-4.0.28-3.36.3.x86_64",
                "product": {
                  "name": "susemanager-tools-4.0.28-3.36.3.x86_64",
                  "product_id": "susemanager-tools-4.0.28-3.36.3.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy Module 4.0",
                "product": {
                  "name": "SUSE Manager Proxy Module 4.0",
                  "product_id": "SUSE Manager Proxy Module 4.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-suse-manager-proxy:4.0"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Server Module 4.0",
                "product": {
                  "name": "SUSE Manager Server Module 4.0",
                  "product_id": "SUSE Manager Server Module 4.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-suse-manager-server:4.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch as component of SUSE Manager Proxy Module 4.0",
          "product_id": "SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch"
        },
        "product_reference": "python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacecmd-4.0.20-3.19.2.noarch as component of SUSE Manager Proxy Module 4.0",
          "product_id": "SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2.noarch"
        },
        "product_reference": "spacecmd-4.0.20-3.19.2.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-4.0.23-3.30.3.noarch as component of SUSE Manager Proxy Module 4.0",
          "product_id": "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch"
        },
        "product_reference": "spacewalk-base-minimal-4.0.23-3.30.3.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-config-4.0.23-3.30.3.noarch as component of SUSE Manager Proxy Module 4.0",
          "product_id": "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch"
        },
        "product_reference": "spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-certs-tools-4.0.17-3.21.3.noarch as component of SUSE Manager Proxy Module 4.0",
          "product_id": "SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch"
        },
        "product_reference": "spacewalk-certs-tools-4.0.17-3.21.3.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-broker-4.0.14-3.10.3.noarch as component of SUSE Manager Proxy Module 4.0",
          "product_id": "SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3.noarch"
        },
        "product_reference": "spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-common-4.0.14-3.10.3.noarch as component of SUSE Manager Proxy Module 4.0",
          "product_id": "SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3.noarch"
        },
        "product_reference": "spacewalk-proxy-common-4.0.14-3.10.3.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-management-4.0.14-3.10.3.noarch as component of SUSE Manager Proxy Module 4.0",
          "product_id": "SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3.noarch"
        },
        "product_reference": "spacewalk-proxy-management-4.0.14-3.10.3.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch as component of SUSE Manager Proxy Module 4.0",
          "product_id": "SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch"
        },
        "product_reference": "spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-redirect-4.0.14-3.10.3.noarch as component of SUSE Manager Proxy Module 4.0",
          "product_id": "SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3.noarch"
        },
        "product_reference": "spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-proxy-salt-4.0.14-3.10.3.noarch as component of SUSE Manager Proxy Module 4.0",
          "product_id": "SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3.noarch"
        },
        "product_reference": "spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hibernate5-5.3.7-4.3.2.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2.noarch"
        },
        "product_reference": "hibernate5-5.3.7-4.3.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch"
        },
        "product_reference": "image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvpn-formula-0.1.1-4.6.2.ppc64le as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.ppc64le"
        },
        "product_reference": "openvpn-formula-0.1.1-4.6.2.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvpn-formula-0.1.1-4.6.2.s390x as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.s390x"
        },
        "product_reference": "openvpn-formula-0.1.1-4.6.2.s390x",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openvpn-formula-0.1.1-4.6.2.x86_64 as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.x86_64"
        },
        "product_reference": "openvpn-formula-0.1.1-4.6.2.x86_64",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "prometheus-exporters-formula-0.7.1-3.10.2.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2.noarch"
        },
        "product_reference": "prometheus-exporters-formula-0.7.1-3.10.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch"
        },
        "product_reference": "python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "salt-netapi-client-0.17.0-4.6.3.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3.noarch"
        },
        "product_reference": "salt-netapi-client-0.17.0-4.6.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch"
        },
        "product_reference": "saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacecmd-4.0.20-3.19.2.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2.noarch"
        },
        "product_reference": "spacecmd-4.0.20-3.19.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-admin-4.0.11-3.12.1.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1.noarch"
        },
        "product_reference": "spacewalk-admin-4.0.11-3.12.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-4.0.23-3.30.3.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3.noarch"
        },
        "product_reference": "spacewalk-base-4.0.23-3.30.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-4.0.23-3.30.3.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch"
        },
        "product_reference": "spacewalk-base-minimal-4.0.23-3.30.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-config-4.0.23-3.30.3.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch"
        },
        "product_reference": "spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-certs-tools-4.0.17-3.21.3.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch"
        },
        "product_reference": "spacewalk-certs-tools-4.0.17-3.21.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-html-4.0.23-3.30.3.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3.noarch"
        },
        "product_reference": "spacewalk-html-4.0.23-3.30.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-4.0.37-3.39.1.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1.noarch"
        },
        "product_reference": "spacewalk-java-4.0.37-3.39.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-config-4.0.37-3.39.1.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1.noarch"
        },
        "product_reference": "spacewalk-java-config-4.0.37-3.39.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-lib-4.0.37-3.39.1.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1.noarch"
        },
        "product_reference": "spacewalk-java-lib-4.0.37-3.39.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-postgresql-4.0.37-3.39.1.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1.noarch"
        },
        "product_reference": "spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-setup-4.0.14-3.14.1.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1.noarch"
        },
        "product_reference": "spacewalk-setup-4.0.14-3.14.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-taskomatic-4.0.37-3.39.1.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1.noarch"
        },
        "product_reference": "spacewalk-taskomatic-4.0.37-3.39.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-utils-4.0.18-3.21.3.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3.noarch"
        },
        "product_reference": "spacewalk-utils-4.0.18-3.21.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-4.0.28-3.36.3.ppc64le as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.ppc64le"
        },
        "product_reference": "susemanager-4.0.28-3.36.3.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-4.0.28-3.36.3.s390x as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.s390x"
        },
        "product_reference": "susemanager-4.0.28-3.36.3.s390x",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-4.0.28-3.36.3.x86_64 as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.x86_64"
        },
        "product_reference": "susemanager-4.0.28-3.36.3.x86_64",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-frontend-libs-4.0.2-4.3.2.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2.noarch"
        },
        "product_reference": "susemanager-frontend-libs-4.0.2-4.3.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-schema-4.0.22-3.29.2.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2.noarch"
        },
        "product_reference": "susemanager-schema-4.0.22-3.29.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-sls-4.0.29-3.31.3.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3.noarch"
        },
        "product_reference": "susemanager-sls-4.0.29-3.31.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-sync-data-4.0.18-3.24.2.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2.noarch"
        },
        "product_reference": "susemanager-sync-data-4.0.18-3.24.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-tools-4.0.28-3.36.3.ppc64le as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.ppc64le"
        },
        "product_reference": "susemanager-tools-4.0.28-3.36.3.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-tools-4.0.28-3.36.3.s390x as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.s390x"
        },
        "product_reference": "susemanager-tools-4.0.28-3.36.3.s390x",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-tools-4.0.28-3.36.3.x86_64 as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.x86_64"
        },
        "product_reference": "susemanager-tools-4.0.28-3.36.3.x86_64",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-web-libs-4.0.23-3.30.3.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3.noarch"
        },
        "product_reference": "susemanager-web-libs-4.0.23-3.30.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "virtualization-host-formula-0.5-4.12.3.noarch as component of SUSE Manager Server Module 4.0",
          "product_id": "SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3.noarch"
        },
        "product_reference": "virtualization-host-formula-0.5-4.12.3.noarch",
        "relates_to_product_reference": "SUSE Manager Server Module 4.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-14900",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-14900"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
          "SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2.noarch",
          "SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
          "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.ppc64le",
          "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.s390x",
          "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.x86_64",
          "SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2.noarch",
          "SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3.noarch",
          "SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
          "SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3.noarch",
          "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.ppc64le",
          "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.s390x",
          "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.x86_64",
          "SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2.noarch",
          "SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2.noarch",
          "SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3.noarch",
          "SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2.noarch",
          "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.ppc64le",
          "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.s390x",
          "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.x86_64",
          "SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-14900",
          "url": "https://www.suse.com/security/cve/CVE-2019-14900"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172079 for CVE-2019-14900",
          "url": "https://bugzilla.suse.com/1172079"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
            "SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.ppc64le",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.s390x",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.x86_64",
            "SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2.noarch",
            "SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3.noarch",
            "SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
            "SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.ppc64le",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.s390x",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.x86_64",
            "SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2.noarch",
            "SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3.noarch",
            "SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-16T12:24:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-14900"
    },
    {
      "cve": "CVE-2020-11022",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-11022"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery\u0027s DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
          "SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2.noarch",
          "SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
          "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.ppc64le",
          "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.s390x",
          "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.x86_64",
          "SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2.noarch",
          "SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3.noarch",
          "SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
          "SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3.noarch",
          "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.ppc64le",
          "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.s390x",
          "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.x86_64",
          "SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2.noarch",
          "SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2.noarch",
          "SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3.noarch",
          "SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2.noarch",
          "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.ppc64le",
          "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.s390x",
          "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.x86_64",
          "SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-11022",
          "url": "https://www.suse.com/security/cve/CVE-2020-11022"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173090 for CVE-2020-11022",
          "url": "https://bugzilla.suse.com/1173090"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178434 for CVE-2020-11022",
          "url": "https://bugzilla.suse.com/1178434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190663 for CVE-2020-11022",
          "url": "https://bugzilla.suse.com/1190663"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
            "SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.ppc64le",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.s390x",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.x86_64",
            "SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2.noarch",
            "SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3.noarch",
            "SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
            "SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.ppc64le",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.s390x",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.x86_64",
            "SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2.noarch",
            "SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3.noarch",
            "SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-16T12:24:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-11022"
    },
    {
      "cve": "CVE-2020-8028",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-8028"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Server 3.2, SUSE Manager Server 4.0 allows local users to escalate to root on every system managed by SUSE manager. On the managing node itself code can be executed as user salt, potentially allowing for escalation to root there. This issue affects: SUSE Linux Enterprise Module for SUSE Manager Server 4.1 google-gson versions prior to 2.8.5-3.4.3, httpcomponents-client-4.5.6-3.4.2, httpcomponents-. SUSE Manager Proxy 4.0 release-notes-susemanager-proxy versions prior to 4.0.9-0.16.38.1. SUSE Manager Retail Branch Server 4.0 release-notes-susemanager-proxy versions prior to 4.0.9-0.16.38.1. SUSE Manager Server 3.2 salt-netapi-client versions prior to 0.16.0-4.14.1, spacewalk-. SUSE Manager Server 4.0 release-notes-susemanager versions prior to 4.0.9-3.54.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
          "SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
          "SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2.noarch",
          "SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
          "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.ppc64le",
          "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.s390x",
          "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.x86_64",
          "SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2.noarch",
          "SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3.noarch",
          "SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
          "SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1.noarch",
          "SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3.noarch",
          "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.ppc64le",
          "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.s390x",
          "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.x86_64",
          "SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2.noarch",
          "SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2.noarch",
          "SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3.noarch",
          "SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2.noarch",
          "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.ppc64le",
          "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.s390x",
          "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.x86_64",
          "SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3.noarch",
          "SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-8028",
          "url": "https://www.suse.com/security/cve/CVE-2020-8028"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1175884 for CVE-2020-8028",
          "url": "https://bugzilla.suse.com/1175884"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
            "SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.ppc64le",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.s390x",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.x86_64",
            "SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2.noarch",
            "SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3.noarch",
            "SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3.noarch",
            "SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3.noarch",
            "SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2.noarch",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.ppc64le",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.s390x",
            "SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2.x86_64",
            "SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2.noarch",
            "SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3.noarch",
            "SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1.noarch",
            "SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3.noarch",
            "SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2.noarch",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.ppc64le",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.s390x",
            "SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3.x86_64",
            "SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3.noarch",
            "SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-16T12:24:27Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-8028"
    }
  ]
}

{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "jdeveloper",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.2.1.3.0"
      },
      {
        "_id": null,
        "model": "jdeveloper",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.2.1.4.0"
      },
      {
        "_id": null,
        "model": "financial services data foundation",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "financial services analytical applications infrastructure",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6.0.0"
      },
      {
        "_id": null,
        "model": "hospitality simphony",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "19.1.0-19.1.2"
      },
      {
        "_id": null,
        "model": "financial services market risk measurement and management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.8"
      },
      {
        "_id": null,
        "model": "drupal",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "drupal",
        "version": "8.7.0"
      },
      {
        "_id": null,
        "model": "financial services liquidity risk measurement and management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "financial services analytical applications infrastructure",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "h300s",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "drupal",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "drupal",
        "version": "8.7.14"
      },
      {
        "_id": null,
        "model": "communications billing and revenue management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.0.0.3.0"
      },
      {
        "_id": null,
        "model": "financial services analytical applications reconciliation framework",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.8"
      },
      {
        "_id": null,
        "model": "hospitality materials control",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "18.1"
      },
      {
        "_id": null,
        "model": "hospitality simphony",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "19.1.2"
      },
      {
        "_id": null,
        "model": "financial services data governance for us regulatory reporting",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.9"
      },
      {
        "_id": null,
        "model": "policy automation connector for siebel",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "10.4.6"
      },
      {
        "_id": null,
        "model": "financial services analytical applications reconciliation framework",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "financial services basel regulatory capital basic",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.8"
      },
      {
        "_id": null,
        "model": "enterprise session border controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.4"
      },
      {
        "_id": null,
        "model": "financial services institutional performance analytics",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "financial services profitability management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "retail back office",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "14.0"
      },
      {
        "_id": null,
        "model": "snapcenter",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "drupal",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "drupal",
        "version": "8.8.0"
      },
      {
        "_id": null,
        "model": "financial services price creation and discovery",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.7"
      },
      {
        "_id": null,
        "model": "insurance data foundation",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "banking digital experience",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "20.1"
      },
      {
        "_id": null,
        "model": "insurance allocation manager for enterprise profitability",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "financial services analytical applications reconciliation framework",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "financial services liquidity risk measurement and management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.7"
      },
      {
        "_id": null,
        "model": "insurance accounting analyzer",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.9"
      },
      {
        "_id": null,
        "model": "financial services loan loss forecasting and provisioning",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "financial services funds transfer pricing",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "insurance data foundation",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "agile product lifecycle management for process",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "6.2.0.0"
      },
      {
        "_id": null,
        "model": "peoplesoft enterprise peopletools",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.58"
      },
      {
        "_id": null,
        "model": "communications eagle application processor",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "16.1.0"
      },
      {
        "_id": null,
        "model": "banking digital experience",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "18.2"
      },
      {
        "_id": null,
        "model": "jquery",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "jquery",
        "version": "1.2"
      },
      {
        "_id": null,
        "model": "financial services basel regulatory capital basic",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "financial services data governance for us regulatory reporting",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "financial services profitability management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "drupal",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "drupal",
        "version": "7.0"
      },
      {
        "_id": null,
        "model": "blockchain platform",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "21.1.2"
      },
      {
        "_id": null,
        "model": "drupal",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "drupal",
        "version": "8.8.6"
      },
      {
        "_id": null,
        "model": "communications diameter signaling router idih\\:",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.2.2"
      },
      {
        "_id": null,
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "31"
      },
      {
        "_id": null,
        "model": "financial services loan loss forecasting and provisioning",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "insurance insbridge rating and underwriting",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "5.0.0.0"
      },
      {
        "_id": null,
        "model": "financial services regulatory reporting for european banking authority",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "h300e",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "banking digital experience",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "19.2"
      },
      {
        "_id": null,
        "model": "healthcare foundation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "7.2.0"
      },
      {
        "_id": null,
        "model": "siebel ui framework",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "20.8"
      },
      {
        "_id": null,
        "model": "weblogic server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "14.1.1.0.0"
      },
      {
        "_id": null,
        "model": "banking digital experience",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "20.1"
      },
      {
        "_id": null,
        "model": "h700e",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "weblogic server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.2.1.3.0"
      },
      {
        "_id": null,
        "model": "weblogic server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.2.1.4.0"
      },
      {
        "_id": null,
        "model": "h500s",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "financial services funds transfer pricing",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.7"
      },
      {
        "_id": null,
        "model": "financial services price creation and discovery",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "healthcare foundation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "7.2.1"
      },
      {
        "_id": null,
        "model": "policy automation",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.2.20"
      },
      {
        "_id": null,
        "model": "oncommand system manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "netapp",
        "version": "3.0"
      },
      {
        "_id": null,
        "model": "financial services profitability management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.7"
      },
      {
        "_id": null,
        "model": "financial services hedge management and ifrs valuations",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "enterprise manager ops center",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.4.0.0"
      },
      {
        "_id": null,
        "model": "banking digital experience",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "18.1"
      },
      {
        "_id": null,
        "model": "policy automation",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.2.0"
      },
      {
        "_id": null,
        "model": "financial services asset liability management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "communications application session controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "3.8m0"
      },
      {
        "_id": null,
        "model": "financial services basel regulatory capital internal ratings based approach",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "financial services market risk measurement and management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "9.0"
      },
      {
        "_id": null,
        "model": "banking digital experience",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "18.3"
      },
      {
        "_id": null,
        "model": "financial services hedge management and ifrs valuations",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "weblogic server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "10.3.6.0.0"
      },
      {
        "_id": null,
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "33"
      },
      {
        "_id": null,
        "model": "financial services basel regulatory capital internal ratings based approach",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.8"
      },
      {
        "_id": null,
        "model": "drupal",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "drupal",
        "version": "7.70"
      },
      {
        "_id": null,
        "model": "insurance insbridge rating and underwriting",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "5.6.1.0"
      },
      {
        "_id": null,
        "model": "financial services balance sheet planning",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.8"
      },
      {
        "_id": null,
        "model": "financial services funds transfer pricing",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "retail returns management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "14.1"
      },
      {
        "_id": null,
        "model": "hospitality simphony",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "18.1"
      },
      {
        "_id": null,
        "model": "insurance allocation manager for enterprise profitability",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.8"
      },
      {
        "_id": null,
        "model": "financial services asset liability management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.7"
      },
      {
        "_id": null,
        "model": "insurance data foundation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6-8.1.0"
      },
      {
        "_id": null,
        "model": "peoplesoft enterprise peopletools",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.56"
      },
      {
        "_id": null,
        "model": "financial services basel regulatory capital basic",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "financial services regulatory reporting for us federal reserve",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.9"
      },
      {
        "_id": null,
        "model": "peoplesoft enterprise peopletools",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.57"
      },
      {
        "_id": null,
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.2"
      },
      {
        "_id": null,
        "model": "communications services gatekeeper",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "7.0"
      },
      {
        "_id": null,
        "model": "financial services data integration hub",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "healthcare foundation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "7.3.0"
      },
      {
        "_id": null,
        "model": "insurance insbridge rating and underwriting",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "5.6.0.0"
      },
      {
        "_id": null,
        "model": "hospitality simphony",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "18.2"
      },
      {
        "_id": null,
        "model": "financial services data foundation",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "policy automation for mobile devices",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.2.20"
      },
      {
        "_id": null,
        "model": "storagetek acsls",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.5.1"
      },
      {
        "_id": null,
        "model": "snap creator framework",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "financial services basel regulatory capital internal ratings based approach",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "h410c",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "banking digital experience",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "18.1"
      },
      {
        "_id": null,
        "model": "policy automation for mobile devices",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.2.0"
      },
      {
        "_id": null,
        "model": "jquery",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "jquery",
        "version": "3.5.0"
      },
      {
        "_id": null,
        "model": "financial services liquidity risk management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "oncommand insight",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "32"
      },
      {
        "_id": null,
        "model": "financial services analytical applications infrastructure",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0.0.0"
      },
      {
        "_id": null,
        "model": "h500e",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "h410s",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "log correlation engine",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "tenable",
        "version": "6.0.9"
      },
      {
        "_id": null,
        "model": "communications diameter signaling router idih\\:",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.0"
      },
      {
        "_id": null,
        "model": "healthcare foundation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "7.1.1"
      },
      {
        "_id": null,
        "model": "financial services data integration hub",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.7"
      },
      {
        "_id": null,
        "model": "communications eagle application processor",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "16.4.0"
      },
      {
        "_id": null,
        "model": "financial services asset liability management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "financial services regulatory reporting for us federal reserve",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "max data",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "financial services institutional performance analytics",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "financial services regulatory reporting for european banking authority",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "jdeveloper",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "11.1.1.9.0"
      },
      {
        "_id": null,
        "model": "retail returns management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "14.0"
      },
      {
        "_id": null,
        "model": "financial services loan loss forecasting and provisioning",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.8"
      },
      {
        "_id": null,
        "model": "agile product supplier collaboration for process",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "6.2.0.0"
      },
      {
        "_id": null,
        "model": "financial services analytical applications infrastructure",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.1.0"
      },
      {
        "_id": null,
        "model": "application testing suite",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "13.3.0.1"
      },
      {
        "_id": null,
        "model": "retail back office",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "14.1"
      },
      {
        "_id": null,
        "model": "hospitality simphony",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "19.1.0"
      },
      {
        "_id": null,
        "model": "banking digital experience",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "19.1"
      },
      {
        "_id": null,
        "model": "weblogic server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.1.3.0.0"
      },
      {
        "_id": null,
        "model": "communications webrtc session controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "7.2"
      },
      {
        "_id": null,
        "model": "communications billing and revenue management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "7.5.0.23.0"
      },
      {
        "_id": null,
        "model": "financial services hedge management and ifrs valuations",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.8"
      },
      {
        "_id": null,
        "model": "financial services institutional performance analytics",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.7"
      },
      {
        "_id": null,
        "model": "financial services data integration hub",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.6"
      },
      {
        "_id": null,
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.1"
      },
      {
        "_id": null,
        "model": "h700s",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "financial services liquidity risk measurement and management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.0.8"
      },
      {
        "_id": null,
        "model": "retail customer management and segmentation foundation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "19.0"
      },
      {
        "_id": null,
        "model": "oncommand system manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "netapp",
        "version": "3.1.3"
      },
      {
        "_id": null,
        "model": "hitachi ops center common services",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u65e5\u7acb",
        "version": null
      },
      {
        "_id": null,
        "model": "jquery",
        "scope": null,
        "trust": 0.8,
        "vendor": "jquery",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-004854"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-11022"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Red Hat",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "159852"
      },
      {
        "db": "PACKETSTORM",
        "id": "171215"
      },
      {
        "db": "PACKETSTORM",
        "id": "171212"
      },
      {
        "db": "PACKETSTORM",
        "id": "159876"
      },
      {
        "db": "PACKETSTORM",
        "id": "157850"
      },
      {
        "db": "PACKETSTORM",
        "id": "159275"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2020-11022",
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2020-11022",
            "impactScore": 2.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.9,
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 8.6,
            "id": "VHN-163559",
            "impactScore": 2.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:N/I:P/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "exploitabilityScore": 2.8,
            "id": "CVE-2020-11022",
            "impactScore": 2.7,
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "author": "security-advisories@github.com",
            "availabilityImpact": "NONE",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.6,
            "id": "CVE-2020-11022",
            "impactScore": 4.7,
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "None",
            "baseScore": 6.1,
            "baseSeverity": "Medium",
            "confidentialityImpact": "Low",
            "exploitabilityScore": null,
            "id": "CVE-2020-11022",
            "impactScore": null,
            "integrityImpact": "Low",
            "privilegesRequired": "None",
            "scope": "Changed",
            "trust": 0.8,
            "userInteraction": "Required",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2020-11022",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "security-advisories@github.com",
            "id": "CVE-2020-11022",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2020-11022",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "VULHUB",
            "id": "VHN-163559",
            "trust": 0.1,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2020-11022",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-163559"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-11022"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-004854"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-11022"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-11022"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery\u0027s DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. jQuery Exists in a cross-site scripting vulnerability.Information may be obtained and information may be tampered with. jQuery is an open source, cross-browser JavaScript library developed by American John Resig programmers. The library simplifies the operation between HTML and JavaScript, and has the characteristics of modularization and plug-in extension. The vulnerability stems from the lack of correct validation of client data in WEB applications. An attacker could exploit this vulnerability to execute client code. 8) - aarch64, noarch, ppc64le, s390x, x86_64\n\n3. Description:\n\nThe Public Key Infrastructure (PKI) Core contains fundamental packages\nrequired by Red Hat Certificate System. \n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat\nEnterprise Linux 8.3 Release Notes linked from the References section. Bugs fixed (https://bugzilla.redhat.com/):\n\n1376706 - restore SerialNumber tag in caManualRenewal xml\n1399546 - CVE-2015-9251 jquery: Cross-site scripting via cross-domain ajax requests\n1406505 - KRA ECC installation failed with shared tomcat\n1601614 - CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute\n1601617 - CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip\n1666907 - CC: Enable AIA OCSP cert checking for entire cert chain\n1668097 - CVE-2016-10735 bootstrap: XSS in the data-target attribute\n1686454 - CVE-2019-8331 bootstrap: XSS in the tooltip or popover data-template attribute\n1695901 - CVE-2019-10179 pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA\u0027s DRM agent page in authorize recovery tab\n1701972 - CVE-2019-11358 jquery: Prototype pollution in object\u0027s prototype leading to denial of service, remote code execution, or property injection\n1706521 - CA - SubjectAltNameExtInput does not display text fields to the enrollment page\n1710171 - CVE-2019-10146 pki-core: Reflected XSS in \u0027path length\u0027 constraint field in CA\u0027s Agent page\n1721684 - Rebase pki-servlet-engine to 9.0.30\n1724433 - caTransportCert.cfg  contains MD2/MD5withRSA as signingAlgsAllowed. \n1732565 - CVE-2019-10221 pki-core: Reflected XSS in getcookies?url= endpoint in CA\n1732981 - When nuxwdog is enabled pkidaemon status shows instances as stopped. \n1777579 - CVE-2020-1721 pki-core: KRA vulnerable to reflected XSS via the getPk12 page\n1805541 - [RFE] CA Certificate Transparency with Embedded Signed Certificate Time stamp\n1817247 - Upgrade to 10.8.3 breaks PKI Tomcat Server\n1821851 - [RFE] Provide SSLEngine via JSSProvider for use with PKI\n1822246 - JSS - NativeProxy never calls releaseNativeResources - Memory Leak\n1824939 - JSS: add RSA PSS support - RHEL 8.3\n1824948 - add RSA PSS support - RHEL 8.3\n1825998 - CertificatePoliciesExtDefault MAX_NUM_POLICIES hardcoded limit\n1828406 - CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method\n1842734 - CVE-2019-10179 pki-core: pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA\u0027s DRM agent page in authorize recovery tab [rhel-8]\n1842736 - CVE-2019-10146 pki-core: Reflected Cross-Site Scripting in \u0027path length\u0027 constraint field in CA\u0027s Agent page [rhel-8]\n1843537 - Able to Perform PKI CLI operations like cert request and approval without nssdb password\n1845447 - pkispawn fails in FIPS mode: AJP connector has secretRequired=\"true\" but no secret\n1850004 - CVE-2020-11023 jquery: Passing HTML containing \u003coption\u003e elements to manipulation methods could result in untrusted code execution\n1854043 - /usr/bin/PrettyPrintCert is failing with a ClassNotFoundException\n1854959 - ca-profile-add with Netscape extensions nsCertSSLClient and nsCertEmail in the profile gets stuck in processing\n1855273 - CVE-2020-15720 pki: Dogtag\u0027s python client does not validate certificates\n1855319 - Not able to launch pkiconsole\n1856368 - kra-key-generate request is failing\n1857933 - CA Installation is failing with ncipher v12.30 HSM\n1861911 - pki cli ca-cert-request-approve hangs over crmf request from client-cert-request\n1869893 - Common certificates are missing in CS.cfg on shared PKI instance\n1871064 - replica install failing during pki-ca component configuration\n1873235 - pki ca-user-cert-add with secure port failed with \u0027SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT\u0027\n\n6. You can also manage\nuser accounts for web applications, mobile applications, and RESTful web\nservices. Description:\n\nRed Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak\nproject, that provides authentication and standards-based single sign-on\ncapabilities for web and mobile applications. Description:\n\nRed Hat Identity Management (IdM) is a centralized authentication, identity\nmanagement, and authorization solution for both traditional and cloud-based\nenterprise environments. Bugs fixed (https://bugzilla.redhat.com/):\n\n1399546 - CVE-2015-9251 jquery: Cross-site scripting via cross-domain ajax requests\n1430365 - [RFE] Host-group names command rename\n1488732 - fake_mname in named.conf is no longer effective\n1585020 - Enable compat tree to provide information about AD users and groups on trust agents\n1601614 - CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute\n1601617 - CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip\n1651577 - [WebUI] IPA Error 3007: RequirmentError\" while adding members in \"User ID overrides\" tab\n1668082 - CVE-2018-20676 bootstrap: XSS in the tooltip data-viewport attribute\n1668089 - CVE-2018-20677 bootstrap: XSS in the affix configuration target property\n1668097 - CVE-2016-10735 bootstrap: XSS in the data-target attribute\n1686454 - CVE-2019-8331 bootstrap: XSS in the tooltip or popover data-template attribute\n1701233 - [RFE] support setting supported signature methods on the token\n1701972 - CVE-2019-11358 jquery: Prototype pollution in object\u0027s prototype leading to denial of service, remote code execution, or property injection\n1746830 - Memory leak during search  of idview overrides\n1750893 - Memory leak when slapi-nis return entries retrieved from nsswitch\n1751295 - When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming\n1757045 - IDM Web GUI / IPA web UI: the ID override operation doesn\u0027t work in GUI (it works only from CLI)\n1759888 - Rebase OpenDNSSEC to 2.1\n1768156 - ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED\n1777806 - When Service weight is set as 0 for server in IPA location \"IPA Error 903: InternalError\" is displayed\n1793071 - CVE-2020-1722 ipa: No password length restriction leads to denial of service\n1801698 - [RFE] Changing default hostgroup is too easy\n1802471 - SELinux policy for ipa-custodia\n1809835 - RFE: ipa group-add-member: number of failed should also be emphasized\n1810154 - RFE: ipa-backup should compare locally and globally installed server roles\n1810179 - ipa-client-install should name authselect backups and restore to that at uninstall time\n1813330 - ipa-restore does not restart httpd\n1816784 - KRA install fails if all KRA members are Hidden Replicas\n1818765 - [Rebase] Rebase ipa to 4.8.6+\n1818877 - [Rebase] Rebase to softhsm 2.6.0+\n1828406 - CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method\n1831732 - AVC avc:  denied  { dac_override } for comm=\"ods-enforcerd\n1831935 - AD authentication with IdM against SQL Server\n1832331 - [abrt] [faf] 389-ds-base: unknown function(): /usr/sbin/ns-slapd killed by 11\n1833266 - [dirsrv] set \u0027nsslapd-enable-upgrade-hash: off\u0027 as this raises warnings\n1834264 - BIND rebase: rebuild against new so version\n1834909 - softhsm use-after-free on process exit\n1845211 - Rebase bind-dyndb-ldap to 11.3\n1845537 - IPA bind configuration issue\n1845596 - ipa trust-add fails with \u0027Fetching domains from trusted forest failed\u0027\n1846352 - cannot issue certs with multiple IP addresses corresponding to different hosts\n1846434 - Remove ipa-idoverride-memberof as superceded by ipa-server 4.8.7\n1847999 - EPN does not ship its default configuration ( /etc/ipa/epn.conf ) in freeipa-client-epn\n1849914 - FreeIPA - Utilize 256-bit AJP connector passwords\n1851411 - ipa: typo issue in ipanthomedirectoryrive deffinition\n1852244 - ipa-healthcheck inadvertently obsoleted in RHEL 8.2\n1853263 - ipa-selinux package missing\n1857157 - replica install failing with avc denial for custodia component\n1858318 - AttributeError: module \u0027ssl\u0027 has no attribute \u0027SSLCertVerificationError\u0027  when upgrading ca-less ipa master\n1859213 - AVC denial during ipa-adtrust-install --add-agents\n1863079 - ipa-epn command displays \u0027exception: ConnectionRefusedError: [Errno 111] Connection refused\u0027\n1863616 - CA-less install does not set required permissions on KDC certificate\n1866291 - EPN: enhance input validation\n1866938 - ipa-epn fails to retrieve user data if some user attributes are not present\n1868432 - Unhandled Python exception in \u0027/usr/libexec/ipa/ipa-pki-retrieve-key\u0027\n1869311 - ipa trust-add fails with \u0027Fetching domains from trusted forest failed\u0027\n1870202 - File permissions of /etc/ipa/ca.crt differ between CA-ful and CA-less\n1874015 - ipa hbacrule-add-service --hbacsvcs=sshd is not applied successfully for subdomain\n1875348 - Valgrind reports a memory leak in the Schema Compatibility plugin. \n1879604 - pkispawn logs files are empty\n\n6. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory                           GLSA 202007-03\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n                                           https://security.gentoo.org/ \u003chttps://security.gentoo.org/\u003e\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n    Title: Cacti: Multiple vulnerabilities\n     Date: July 26, 2020\n     Bugs: #728678, #732522\n       ID: 202007-03\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been found in Cacti, the worst of which\ncould result in the arbitrary execution of code. \n\nBackground\n==========\n\nCacti is a complete frontend to rrdtool. \n\nAffected packages\n=================\n\n    -------------------------------------------------------------------\n     Package              /     Vulnerable     /            Unaffected\n    -------------------------------------------------------------------\n  1  net-analyzer/cacti           \u003c 1.2.13                  \u003e= 1.2.13\n  2  net-analyzer/cacti-spine\n                                  \u003c 1.2.13                  \u003e= 1.2.13\n    -------------------------------------------------------------------\n     2 affected packages\n\nDescription\n===========\n\nMultiple vulnerabilities have been discovered in Cacti. Please review\nthe CVE identifiers referenced below for details. \n\nImpact\n======\n\nPlease review the referenced CVE identifiers for details. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Cacti users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot --verbose \"\u003e=net-analyzer/cacti-1.2.13\"\n\nAll Cacti Spine users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot -v \"\u003e=net-analyzer/cacti-spine-1.2.13\"\n\nReferences\n==========\n\n[ 1 ] CVE-2020-11022\n      https://nvd.nist.gov/vuln/detail/CVE-2020-11022 \u003chttps://nvd.nist.gov/vuln/detail/CVE-2020-11022\u003e\n[ 2 ] CVE-2020-11023\n      https://nvd.nist.gov/vuln/detail/CVE-2020-11023 \u003chttps://nvd.nist.gov/vuln/detail/CVE-2020-11023\u003e\n[ 3 ] CVE-2020-14295\n      https://nvd.nist.gov/vuln/detail/CVE-2020-14295 \u003chttps://nvd.nist.gov/vuln/detail/CVE-2020-14295\u003e\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n https://security.gentoo.org/glsa/202007-03 \u003chttps://security.gentoo.org/glsa/202007-03\u003e\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org \u003cmailto:security@gentoo.org\u003e or alternatively, you may file a bug at\nhttps://bugs.gentoo.org \u003chttps://bugs.gentoo.org/\u003e. \n\nLicense\n=======\n\nCopyright 2020 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttps://creativecommons.org/licenses/by-sa/2.5 \u003chttps://creativecommons.org/licenses/by-sa/2.5\u003e\n\n. Description:\n\nRed Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments. Solution:\n\nBefore applying this update, ensure all previously released errata relevant\nto your system is applied. \n\nSee the following documentation, which will be updated shortly for release\n3.11.219, for important instructions on how to upgrade your cluster and\nfully\napply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_r\nelease_notes.html\n\nThis update is available via the Red Hat Network. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n====================================================================                   \nRed Hat Security Advisory\n\nSynopsis:          Moderate: Red Hat Virtualization security, bug fix, and enhancement update\nAdvisory ID:       RHSA-2020:3807-01\nProduct:           Red Hat Virtualization\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2020:3807\nIssue date:        2020-09-23\nCVE Names:         CVE-2020-8203 CVE-2020-11022 CVE-2020-11023\n                   CVE-2020-14333\n====================================================================\n1. Summary:\n\nAn update is now available for Red Hat Virtualization Engine 4.4. \n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 - noarch\n\n3. Description:\n\nThe org.ovirt.engine-root is a core component of oVirt. \n\nThe following packages have been upgraded to a later upstream version:\nansible-runner-service (1.0.5), org.ovirt.engine-root (4.4.2.3),\novirt-engine-dwh (4.4.2.1), ovirt-engine-extension-aaa-ldap (1.4.1),\novirt-engine-ui-extensions (1.2.3), ovirt-log-collector (4.4.3),\novirt-web-ui (1.6.4), rhvm-branding-rhv (4.4.5), rhvm-dependencies (4.4.1),\nvdsm-jsonrpc-java (1.5.5). (BZ#1674420, BZ#1866734)\n\nA list of bugs fixed in this update is available in the Technical Notes\nbook:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/ht\nml-single/technical_notes\n\nSecurity Fix(es):\n\n* nodejs-lodash: prototype pollution in zipObjectDeep function\n(CVE-2020-8203)\n\n* jquery: Cross-site scripting due to improper injQuery.htmlPrefilter\nmethod (CVE-2020-11022)\n\n* jQuery: passing HTML containing \u003coption\u003e elements to manipulation methods\ncould result in untrusted code execution (CVE-2020-11023)\n\n* ovirt-engine: Reflected cross site scripting vulnerability\n(CVE-2020-14333)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\nBug Fix(es):\n\n* Cannot assign direct LUN from FC storage - grayed out (BZ#1625499)\n\n* VM portal always asks how to open console.vv even it has been set to\ndefault application. (BZ#1638217)\n\n* RESTAPI Not able to remove the QoS from a disk profile (BZ#1643520)\n\n* On OVA import, qemu-img fails to write to NFS storage domain (BZ#1748879)\n\n* Possible missing block path for a SCSI host device needs to be handled in\nthe UI (BZ#1801206)\n\n* Scheduling Memory calculation disregards huge-pages (BZ#1804037)\n\n* Engine does not reduce scheduling memory when a VM with dynamic hugepages\nruns. (BZ#1804046)\n\n* In Admin Portal, \"Huge Pages (size: amount)\" needs to be clarified\n(BZ#1806339)\n\n* Refresh LUN is using host from different Data Center to scan the LUN\n(BZ#1838051)\n\n* Unable to create Windows VM\u0027s with Mozilla Firefox version 74.0.1 and\ngreater for RHV-M GUI/Webadmin portal (BZ#1843234)\n\n* [RHV-CNV] - NPE when creating new VM in cnv cluster (BZ#1854488)\n\n* [CNV\u0026RHV] Add-Disk operation failed to complete. (BZ#1855377)\n\n* Cannot create KubeVirt VM as a normal user (BZ#1859460)\n\n* Welcome page - remove Metrics Store links and update \"Insights Guide\"\nlink (BZ#1866466)\n\n* [RHV 4.4] Change in CPU model name after RHVH upgrade (BZ#1869209)\n\n* VM vm-name is down with error. Exit message: unsupported configuration:\nCan\u0027t add USB input device. USB bus is disabled. (BZ#1871235)\n\n* spec_ctrl host feature not detected (BZ#1875609)\n\nEnhancement(s):\n\n* [RFE] API for changed blocks/sectors for a disk for incremental backup\nusage (BZ#1139877)\n\n* [RFE] Improve workflow for storage migration of VMs with multiple disks\n(BZ#1749803)\n\n* [RFE] Move the Remove VM button to the drop down menu when viewing\ndetails such as snapshots (BZ#1763812)\n\n* [RFE] enhance search filter for Storage Domains with free argument\n(BZ#1819260)\n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1625499 - Cannot assign direct LUN from FC storage - grayed out\n1638217 - VM portal always asks how to open console.vv even it has been set to default application. \n1643520 - RESTAPI Not able to remove the QoS from a disk profile\n1674420 - [RFE] - add support for Cascadelake-Server CPUs (and IvyBridge)\n1748879 - On OVA import, qemu-img fails to write to NFS storage domain\n1749803 - [RFE] Improve workflow for storage migration of VMs with multiple disks\n1758024 - Long running Ansible tasks timeout and abort for RHV-H hosts with STIG/Security Profiles applied\n1763812 - [RFE] Move the Remove VM button to the drop down menu when viewing details such as snapshots\n1778471 - Using more than one asterisk in LDAP search string is not working when searching for  AD users. \n1787854 - RHV: Updating/reinstall a host which is part of affinity labels is removed from the affinity label. \n1801206 - Possible missing block path for a SCSI host device needs to be handled in the UI\n1803856 - [Scale] ovirt-vmconsole takes too long or times out in a 500+ VM environment. \n1804037 - Scheduling Memory calculation disregards huge-pages\n1804046 - Engine does not reduce scheduling memory when a VM with dynamic hugepages runs. \n1806339 - In Admin Portal, \"Huge Pages (size: amount)\" needs to be clarified\n1816951 - [CNV\u0026RHV] CNV VM migration failure is not handled correctly by the engine\n1819260 - [RFE] enhance search filter for Storage Domains with free argument\n1826255 - [CNV\u0026RHV]Change name of type of provider - CNV -\u003e OpenShift Virtualization\n1828406 - CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method\n1831949 - RESTAPI javadoc contains missing information about assigning IP address to NIC\n1831952 - RESTAPI contains malformed link around JSON representation fo the cluster\n1831954 - RESTAPI javadoc contains malformed link around oVirt guest agent\n1831956 - RESTAPI javadoc contains malformed link around time zone representation\n1838051 - Refresh LUN is using host from different Data Center to scan the LUN\n1841112 - not able to upload vm from OVA when there are 2 OVA from the same vm in same directory\n1843234 - Unable to create Windows VM\u0027s with Mozilla Firefox version 74.0.1 and greater for RHV-M GUI/Webadmin portal\n1850004 - CVE-2020-11023 jQuery: passing HTML containing \u003coption\u003e elements to manipulation methods could result in untrusted code execution\n1854488 - [RHV-CNV] - NPE when creating new VM in cnv cluster\n1855377 - [CNV\u0026RHV] Add-Disk operation failed to complete. \n1857412 - CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function\n1858184 - CVE-2020-14333 ovirt-engine: Reflected cross site scripting vulnerability\n1859460 - Cannot create KubeVirt VM as a normal user\n1860907 - Upgrade bundled GWT to 2.9.0\n1866466 - Welcome page - remove Metrics Store links and update \"Insights Guide\" link\n1866734 - [DWH] Rebase bug - for the 4.4.2 release\n1869209 - [RHV 4.4] Change in CPU model name after RHVH upgrade\n1869302 - ansible 2.9.12 - host deploy fixes\n1871235 - VM vm-name is down with error. Exit message: unsupported configuration: Can\u0027t add USB input device. USB bus is disabled. \n1875609 - spec_ctrl host feature not detected\n1875851 - Web Admin interface broken on Firefox ESR 68.11\n\n6. Package List:\n\nRHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4:\n\nSource:\nansible-runner-service-1.0.5-1.el8ev.src.rpm\novirt-engine-4.4.2.3-0.6.el8ev.src.rpm\novirt-engine-dwh-4.4.2.1-1.el8ev.src.rpm\novirt-engine-extension-aaa-ldap-1.4.1-1.el8ev.src.rpm\novirt-engine-ui-extensions-1.2.3-1.el8ev.src.rpm\novirt-log-collector-4.4.3-1.el8ev.src.rpm\novirt-web-ui-1.6.4-1.el8ev.src.rpm\nrhvm-branding-rhv-4.4.5-1.el8ev.src.rpm\nrhvm-dependencies-4.4.1-1.el8ev.src.rpm\nvdsm-jsonrpc-java-1.5.5-1.el8ev.src.rpm\n\nnoarch:\nansible-runner-service-1.0.5-1.el8ev.noarch.rpm\novirt-engine-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-backend-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-dbscripts-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-dwh-4.4.2.1-1.el8ev.noarch.rpm\novirt-engine-dwh-grafana-integration-setup-4.4.2.1-1.el8ev.noarch.rpm\novirt-engine-dwh-setup-4.4.2.1-1.el8ev.noarch.rpm\novirt-engine-extension-aaa-ldap-1.4.1-1.el8ev.noarch.rpm\novirt-engine-extension-aaa-ldap-setup-1.4.1-1.el8ev.noarch.rpm\novirt-engine-health-check-bundler-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-restapi-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-setup-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-setup-base-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-setup-plugin-cinderlib-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-setup-plugin-imageio-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-setup-plugin-ovirt-engine-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-setup-plugin-ovirt-engine-common-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-setup-plugin-vmconsole-proxy-helper-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-setup-plugin-websocket-proxy-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-tools-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-tools-backup-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-ui-extensions-1.2.3-1.el8ev.noarch.rpm\novirt-engine-vmconsole-proxy-helper-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-webadmin-portal-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-engine-websocket-proxy-4.4.2.3-0.6.el8ev.noarch.rpm\novirt-log-collector-4.4.3-1.el8ev.noarch.rpm\novirt-web-ui-1.6.4-1.el8ev.noarch.rpm\npython3-ovirt-engine-lib-4.4.2.3-0.6.el8ev.noarch.rpm\nrhvm-4.4.2.3-0.6.el8ev.noarch.rpm\nrhvm-branding-rhv-4.4.5-1.el8ev.noarch.rpm\nrhvm-dependencies-4.4.1-1.el8ev.noarch.rpm\nvdsm-jsonrpc-java-1.5.5-1.el8ev.noarch.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2020-8203\nhttps://access.redhat.com/security/cve/CVE-2020-11022\nhttps://access.redhat.com/security/cve/CVE-2020-11023\nhttps://access.redhat.com/security/cve/CVE-2020-14333\nhttps://access.redhat.com/security/updates/classification/#moderate\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2020 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\nbvmOI0eIsZw=Jhpi\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2020-11022"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-004854"
      },
      {
        "db": "VULHUB",
        "id": "VHN-163559"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-11022"
      },
      {
        "db": "PACKETSTORM",
        "id": "159852"
      },
      {
        "db": "PACKETSTORM",
        "id": "171215"
      },
      {
        "db": "PACKETSTORM",
        "id": "171212"
      },
      {
        "db": "PACKETSTORM",
        "id": "159876"
      },
      {
        "db": "PACKETSTORM",
        "id": "158555"
      },
      {
        "db": "PACKETSTORM",
        "id": "157850"
      },
      {
        "db": "PACKETSTORM",
        "id": "159275"
      }
    ],
    "trust": 2.43
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2020-11022",
        "trust": 3.5
      },
      {
        "db": "PACKETSTORM",
        "id": "162159",
        "trust": 1.2
      },
      {
        "db": "TENABLE",
        "id": "TNS-2021-02",
        "trust": 1.2
      },
      {
        "db": "TENABLE",
        "id": "TNS-2020-10",
        "trust": 1.2
      },
      {
        "db": "TENABLE",
        "id": "TNS-2020-11",
        "trust": 1.2
      },
      {
        "db": "TENABLE",
        "id": "TNS-2021-10",
        "trust": 1.2
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-055-02",
        "trust": 0.9
      },
      {
        "db": "JVN",
        "id": "JVNVU99843134",
        "trust": 0.8
      },
      {
        "db": "JVN",
        "id": "JVNVU94912830",
        "trust": 0.8
      },
      {
        "db": "JVN",
        "id": "JVNVU94847990",
        "trust": 0.8
      },
      {
        "db": "JVN",
        "id": "JVNVU94973485",
        "trust": 0.8
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-25-182-07",
        "trust": 0.8
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-342-02",
        "trust": 0.8
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-097-01",
        "trust": 0.8
      },
      {
        "db": "CERT@VDE",
        "id": "VDE-2021-027",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-004854",
        "trust": 0.8
      },
      {
        "db": "PACKETSTORM",
        "id": "171212",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "171215",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "159852",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "159876",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "159275",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "157850",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "158555",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "171213",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "170823",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "171214",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "160274",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "170821",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "159353",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "161727",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "170819",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "168304",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "170817",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "158750",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "159513",
        "trust": 0.1
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202004-2429",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-163559",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-11022",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-163559"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-11022"
      },
      {
        "db": "PACKETSTORM",
        "id": "159852"
      },
      {
        "db": "PACKETSTORM",
        "id": "171215"
      },
      {
        "db": "PACKETSTORM",
        "id": "171212"
      },
      {
        "db": "PACKETSTORM",
        "id": "159876"
      },
      {
        "db": "PACKETSTORM",
        "id": "158555"
      },
      {
        "db": "PACKETSTORM",
        "id": "157850"
      },
      {
        "db": "PACKETSTORM",
        "id": "159275"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-004854"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-11022"
      }
    ]
  },
  "id": "VAR-202004-2191",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-163559"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2026-03-09T21:54:02.528000Z",
  "patch": {
    "_id": null,
    "data": [
      {
        "title": "hitachi-sec-2020-130",
        "trust": 0.8,
        "url": "https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77"
      },
      {
        "title": "Red Hat: Moderate: OpenShift Container Platform 3.11 security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20202217 - Security Advisory"
      },
      {
        "title": "Debian Security Advisories: DSA-4693-1 drupal7 -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=978f239ce60a8a08c53eb64ba189d0f6"
      },
      {
        "title": "Red Hat: Moderate: Red Hat AMQ Interconnect 1.9.0 release and security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20204211 - Security Advisory"
      },
      {
        "title": "Red Hat: Moderate: Red Hat Virtualization security, bug fix, and enhancement update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20203807 - Security Advisory"
      },
      {
        "title": "Red Hat: Moderate: Red Hat OpenShift Service Mesh security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20202362 - Security Advisory"
      },
      {
        "title": "Red Hat: Moderate: security update - Red Hat Ansible Tower 3.7.4-1 - RHEL7 Container",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20205249 - Security Advisory"
      },
      {
        "title": "Debian CVElist Bug Report Logs: wordpress: WordPress 5.9.2 security and maintenance release",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=e7014c0a68e8d9bc31a54125059176dc"
      },
      {
        "title": "Red Hat: Important: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20226393 - Security Advisory"
      },
      {
        "title": "Red Hat: Moderate: ipa security, bug fix, and enhancement update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20203936 - Security Advisory"
      },
      {
        "title": "Red Hat: Important: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20203247 - Security Advisory"
      },
      {
        "title": "Red Hat: Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20204670 - Security Advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat Single Sign-On 7.4.1 security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20202813 - Security Advisory"
      },
      {
        "title": "Tenable Security Advisories: [R1] Nessus 8.13.0 Fixes One Third-party Vulnerability",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories\u0026qid=TNS-2020-10"
      },
      {
        "title": "HP: SUPPORT COMMUNICATION- SECURITY BULLETIN\nHPSBPI03688 rev. 1 - Certain HP Printer and MFP products  -  Cross-Site Scripting (XSS)",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=hp_bulletin\u0026qid=0c6e8f969487f201b1d56f59bd98f443"
      },
      {
        "title": "HP: SUPPORT COMMUNICATION- SECURITY BULLETIN\nHPSBPI03688 rev. 1 - Certain HP Printer and MFP products  -  Cross-Site Scripting (XSS)",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=hp_bulletin\u0026qid=e57a04f097f54c762da82263eadc1b8a"
      },
      {
        "title": "Red Hat: Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20204847 - Security Advisory"
      },
      {
        "title": "Tenable Security Advisories: [R1] Nessus Network Monitor 5.13.0 Fixes One Third-party Vulnerability",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories\u0026qid=TNS-2021-02"
      },
      {
        "title": "Red Hat: Important: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20230556 - Security Advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20230554 - Security Advisory"
      },
      {
        "title": "Tenable Security Advisories: [R1] Tenable.sc 5.17.0 Fixes Multiple Vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories\u0026qid=TNS-2020-11"
      },
      {
        "title": "Amazon Linux 2: ALAS2-2020-1519",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=ALAS2-2020-1519"
      },
      {
        "title": "Hitachi Security Advisories: Multiple Vulnerabilities in Hitachi Ops Center Common Services",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=hitachi_security_advisories\u0026qid=hitachi-sec-2020-130"
      },
      {
        "title": "Tenable Security Advisories: [R1] LCE 6.0.9 Fixes Multiple Third-party Vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories\u0026qid=TNS-2021-10"
      },
      {
        "title": "Red Hat: Important: Red Hat Single Sign-On 7.6.2 security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20231049 - Security Advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat Single Sign-On 7.6.2 security update on RHEL 9",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20231045 - Security Advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat Single Sign-On 7.6.2 security update on RHEL 7",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20231043 - Security Advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat Single Sign-On 7.6.2 security update on RHEL 8",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20231044 - Security Advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat Single Sign-On 7.6.2 for OpenShift image security and enhancement update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20231047 - Security Advisory"
      },
      {
        "title": "Red Hat: Moderate: OpenShift Container Platform 4.6.1 image security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20204298 - Security Advisory"
      },
      {
        "title": "Geolocation Playground",
        "trust": 0.1,
        "url": "https://github.com/blaufish/geo "
      },
      {
        "title": "https-nj.gov---CVE-2020-11022\nRECOMMENDATION\nREFERENCES",
        "trust": 0.1,
        "url": "https://github.com/Snorlyd/https-nj.gov---CVE-2020-11022 "
      },
      {
        "title": "https-nj.gov---CVE-2020-11022\nRECOMMENDATION\nREFERENCES",
        "trust": 0.1,
        "url": "https://github.com/korestreet/https-nj.gov---CVE-2020-11022 "
      },
      {
        "title": "AlmostSignificant",
        "trust": 0.1,
        "url": "https://github.com/bartongroup/AlmostSignificant "
      },
      {
        "title": "Bagel Patch Website\n\nTO DO:",
        "trust": 0.1,
        "url": "https://github.com/corey-schneider/bagel-shop "
      },
      {
        "title": "JS_Encoder",
        "trust": 0.1,
        "url": "https://github.com/AssassinUKG/JS_Encoder "
      },
      {
        "title": "XSSPlayground\nWhat is XSS?",
        "trust": 0.1,
        "url": "https://github.com/AssassinUKG/XSSPlayground "
      },
      {
        "title": "jQuery XSS",
        "trust": 0.1,
        "url": "https://github.com/EmptyHeart5292/jQuery-XSS "
      },
      {
        "title": "https://github.com/DanielRuf/snyk-js-jquery-565129",
        "trust": 0.1,
        "url": "https://github.com/DanielRuf/snyk-js-jquery-565129 "
      },
      {
        "title": "CVE-2020-11022 CVE-2020-11023",
        "trust": 0.1,
        "url": "https://github.com/0xAJ2K/CVE-2020-11022-CVE-2020-11023 "
      },
      {
        "title": "Strings_Attached\nUser Experience\nDevelopment Process\nTesting\nBugs\nLibraries and Programs Used\nDeployment\nCredits\nAcknowledgements",
        "trust": 0.1,
        "url": "https://github.com/johnrearden/strings_attached "
      },
      {
        "title": "CVEcrystalyer",
        "trust": 0.1,
        "url": "https://github.com/captcha-n00b/CVEcrystalyer "
      },
      {
        "title": "CVE Sandbox :: jQuery",
        "trust": 0.1,
        "url": "https://github.com/cve-sandbox/jquery "
      },
      {
        "title": "jQuery \u2014 New Wave JavaScript",
        "trust": 0.1,
        "url": "https://github.com/spurreiter/jquery "
      },
      {
        "title": "Github Repository Security Alerts",
        "trust": 0.1,
        "url": "https://github.com/elifesciences/github-repo-security-alerts "
      },
      {
        "title": "Case Study",
        "trust": 0.1,
        "url": "https://github.com/faizhaffizudin/Case-Study-Hamsa "
      },
      {
        "title": "Retire HTML Parser",
        "trust": 0.1,
        "url": "https://github.com/marksowell/retire-html-parser "
      },
      {
        "title": "https://github.com/octane23/CASE-STUDY-1",
        "trust": 0.1,
        "url": "https://github.com/octane23/CASE-STUDY-1 "
      },
      {
        "title": "Awesome-POC",
        "trust": 0.1,
        "url": "https://github.com/ArrestX/--POC "
      },
      {
        "title": "Normal-POC",
        "trust": 0.1,
        "url": "https://github.com/Miraitowa70/POC-Notes "
      },
      {
        "title": "Normal-POC",
        "trust": 0.1,
        "url": "https://github.com/Miraitowa70/Pentest-Notes "
      },
      {
        "title": "Vulnerability",
        "trust": 0.1,
        "url": "https://github.com/tzwlhack/Vulnerability "
      },
      {
        "title": "Awesome-POC",
        "trust": 0.1,
        "url": "https://github.com/KayCHENvip/vulnerability-poc "
      },
      {
        "title": "Awesome-POC",
        "trust": 0.1,
        "url": "https://github.com/Threekiii/Awesome-POC "
      },
      {
        "title": "\u6b22\u8fce\u5173\u6ce8\u963f\u5c14\u6cd5\u5b9e\u9a8c\u5ba4\u5fae\u4fe1\u516c\u4f17\u53f7",
        "trust": 0.1,
        "url": "https://github.com/alphaSeclab/sec-daily-2020 "
      },
      {
        "title": "SecBooks\nSecBooks\u76ee\u5f55",
        "trust": 0.1,
        "url": "https://github.com/SexyBeast233/SecBooks "
      },
      {
        "title": "PoC in GitHub",
        "trust": 0.1,
        "url": "https://github.com/soosmile/POC "
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2020-11022"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-004854"
      }
    ]
  },
  "problemtype_data": {
    "_id": null,
    "data": [
      {
        "problemtype": "CWE-79",
        "trust": 1.1
      },
      {
        "problemtype": "Cross-site scripting (CWE-79) [NVD evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-163559"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-004854"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-11022"
      }
    ]
  },
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 1.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-11022"
      },
      {
        "trust": 1.3,
        "url": "https://www.debian.org/security/2020/dsa-4693"
      },
      {
        "trust": 1.3,
        "url": "https://security.gentoo.org/glsa/202007-03"
      },
      {
        "trust": 1.2,
        "url": "https://github.com/jquery/jquery/security/advisories/ghsa-gxr4-xjj5-5px2"
      },
      {
        "trust": 1.2,
        "url": "https://security.netapp.com/advisory/ntap-20200511-0006/"
      },
      {
        "trust": 1.2,
        "url": "https://www.drupal.org/sa-core-2020-002"
      },
      {
        "trust": 1.2,
        "url": "https://www.tenable.com/security/tns-2020-10"
      },
      {
        "trust": 1.2,
        "url": "https://www.tenable.com/security/tns-2020-11"
      },
      {
        "trust": 1.2,
        "url": "https://www.tenable.com/security/tns-2021-02"
      },
      {
        "trust": 1.2,
        "url": "https://www.tenable.com/security/tns-2021-10"
      },
      {
        "trust": 1.2,
        "url": "http://packetstormsecurity.com/files/162159/jquery-1.2-cross-site-scripting.html"
      },
      {
        "trust": 1.2,
        "url": "https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/"
      },
      {
        "trust": 1.2,
        "url": "https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77"
      },
      {
        "trust": 1.2,
        "url": "https://jquery.com/upgrade-guide/3.5/"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com//security-alerts/cpujul2021.html"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com/security-alerts/cpuapr2021.html"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com/security-alerts/cpujan2021.html"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
      },
      {
        "trust": 1.2,
        "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html"
      },
      {
        "trust": 1.2,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html"
      },
      {
        "trust": 1.2,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html"
      },
      {
        "trust": 1.2,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html"
      },
      {
        "trust": 1.1,
        "url": "https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/voe7p7apprqkd4fgnhbkjpdy6ffcoh3w/"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/qpn2l2xvqgua2v5hnqjwhk3apsk3vn7k/"
      },
      {
        "trust": 1.1,
        "url": "https://lists.apache.org/thread.html/rdf44341677cf7eec7e9aa96dcf3f37ed709544863d619cca8c36f133%40%3ccommits.airflow.apache.org%3e"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/sfp4uk4egp4afh2mwyj5a5z4i7xvfq6b/"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/avkyxlwclzbv2n7m46kyk4lva5oxwpby/"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/sapqvx3xdnpgft26qaq6ajixzzbz4cd4/"
      },
      {
        "trust": 1.1,
        "url": "https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d%40%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 1.1,
        "url": "https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67%40%3cdev.flink.apache.org%3e"
      },
      {
        "trust": 1.1,
        "url": "https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48%40%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 1.1,
        "url": "https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c%40%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 1.1,
        "url": "https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760%40%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 1.1,
        "url": "https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2%40%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 1.1,
        "url": "https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4%40%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 1.1,
        "url": "https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae%40%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 1.1,
        "url": "https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108%40%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 1.1,
        "url": "https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36%40%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 0.9,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-055-02"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu94912830/"
      },
      {
        "trust": 0.8,
        "url": "http://jvn.jp/vu/jvnvu94847990/index.html"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu99843134/index.html"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu94973485/index.html"
      },
      {
        "trust": 0.8,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-097-01"
      },
      {
        "trust": 0.8,
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-342-02"
      },
      {
        "trust": 0.8,
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-07"
      },
      {
        "trust": 0.8,
        "url": "https://cert.vde.com/en/advisories/vde-2021-027/"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.6,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/cve/cve-2020-11022"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2018-14042"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-11023"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2018-14040"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-14042"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.4,
        "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2019-11358"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-11358"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-14040"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2020-11023"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/errata/rhsa-2020:2217"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2015-9251"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2019-8331"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-10735"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-9251"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2016-10735"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-8331"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-38750"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-1471"
      },
      {
        "trust": 0.2,
        "url": "https://listman.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-1438"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-3916"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-40150"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-31129"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-40149"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-25857"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-46175"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-35065"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-45047"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-46364"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-44906"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2021-44906"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2023-0091"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-24785"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-3782"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-42004"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-2764"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-2764"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-46363"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-1471"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2023-0264"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-38751"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-1274"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-37603"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-45693"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-38749"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-31129"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2021-35065"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-42003"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-1438"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-25857"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-24785"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-1274"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/avkyxlwclzbv2n7m46kyk4lva5oxwpby/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/voe7p7apprqkd4fgnhbkjpdy6ffcoh3w/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/qpn2l2xvqgua2v5hnqjwhk3apsk3vn7k/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/sfp4uk4egp4afh2mwyj5a5z4i7xvfq6b/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/sapqvx3xdnpgft26qaq6ajixzzbz4cd4/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.apache.org/thread.html/rdf44341677cf7eec7e9aa96dcf3f37ed709544863d619cca8c36f133@%3ccommits.airflow.apache.org%3e"
      },
      {
        "trust": 0.1,
        "url": "https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67@%3cdev.flink.apache.org%3e"
      },
      {
        "trust": 0.1,
        "url": "https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d@%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 0.1,
        "url": "https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48@%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 0.1,
        "url": "https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760@%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 0.1,
        "url": "https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c@%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 0.1,
        "url": "https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4@%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 0.1,
        "url": "https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2@%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 0.1,
        "url": "https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae@%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 0.1,
        "url": "https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108@%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 0.1,
        "url": "https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36@%3cissues.flink.apache.org%3e"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/79.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://github.com/blaufish/geo"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-1721"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-10146"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-10221"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-1721"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-15720"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-15720"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-10146"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-10179"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-10179"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-10221"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2020:4847"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-47629"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2023:1047"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2023-21843"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-4039"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-37603"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-40304"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2023-21835"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-40303"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-4137"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2023:1043"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-1722"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-20676"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-1722"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-20676"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-20677"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2020:4670"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-20677"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-14295\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.gentoo.org/\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-11022\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-11023\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.gentoo.org/glsa/202007-03\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://creativecommons.org/licenses/by-sa/2.5\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://bugs.gentoo.org"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-14295"
      },
      {
        "trust": 0.1,
        "url": "https://creativecommons.org/licenses/by-sa/2.5"
      },
      {
        "trust": 0.1,
        "url": "https://security.gentoo.org/"
      },
      {
        "trust": 0.1,
        "url": "https://bugs.gentoo.org/\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/articles/11258."
      },
      {
        "trust": 0.1,
        "url": "https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_r"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/articles/2974891"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-8203"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/ht"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-8203"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2020:3807"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-14333"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-14333"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-163559"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-11022"
      },
      {
        "db": "PACKETSTORM",
        "id": "159852"
      },
      {
        "db": "PACKETSTORM",
        "id": "171215"
      },
      {
        "db": "PACKETSTORM",
        "id": "171212"
      },
      {
        "db": "PACKETSTORM",
        "id": "159876"
      },
      {
        "db": "PACKETSTORM",
        "id": "158555"
      },
      {
        "db": "PACKETSTORM",
        "id": "157850"
      },
      {
        "db": "PACKETSTORM",
        "id": "159275"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-004854"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-11022"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-163559",
        "ident": null
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-11022",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "159852",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "171215",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "171212",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "159876",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "158555",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "157850",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "159275",
        "ident": null
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-004854",
        "ident": null
      },
      {
        "db": "NVD",
        "id": "CVE-2020-11022",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2020-04-29T00:00:00",
        "db": "VULHUB",
        "id": "VHN-163559",
        "ident": null
      },
      {
        "date": "2020-04-29T00:00:00",
        "db": "VULMON",
        "id": "CVE-2020-11022",
        "ident": null
      },
      {
        "date": "2020-11-04T15:29:15",
        "db": "PACKETSTORM",
        "id": "159852",
        "ident": null
      },
      {
        "date": "2023-03-02T15:19:44",
        "db": "PACKETSTORM",
        "id": "171215",
        "ident": null
      },
      {
        "date": "2023-03-02T15:19:19",
        "db": "PACKETSTORM",
        "id": "171212",
        "ident": null
      },
      {
        "date": "2020-11-04T15:32:52",
        "db": "PACKETSTORM",
        "id": "159876",
        "ident": null
      },
      {
        "date": "2020-07-27T17:38:33",
        "db": "PACKETSTORM",
        "id": "158555",
        "ident": null
      },
      {
        "date": "2020-05-28T16:07:33",
        "db": "PACKETSTORM",
        "id": "157850",
        "ident": null
      },
      {
        "date": "2020-09-24T00:30:36",
        "db": "PACKETSTORM",
        "id": "159275",
        "ident": null
      },
      {
        "date": "2020-05-29T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-004854",
        "ident": null
      },
      {
        "date": "2020-04-29T22:15:11.903000",
        "db": "NVD",
        "id": "CVE-2020-11022",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2022-07-25T00:00:00",
        "db": "VULHUB",
        "id": "VHN-163559",
        "ident": null
      },
      {
        "date": "2023-11-07T00:00:00",
        "db": "VULMON",
        "id": "CVE-2020-11022",
        "ident": null
      },
      {
        "date": "2025-07-03T06:01:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-004854",
        "ident": null
      },
      {
        "date": "2024-11-21T04:56:36.110000",
        "db": "NVD",
        "id": "CVE-2020-11022",
        "ident": null
      }
    ]
  },
  "title": {
    "_id": null,
    "data": "jQuery\u00a0 Cross-site scripting vulnerability in",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-004854"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "_id": null,
    "data": "code execution, xss, memory leak",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "159852"
      },
      {
        "db": "PACKETSTORM",
        "id": "159876"
      }
    ],
    "trust": 0.2
  }
}