CVE-2025-53883
A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x86_64/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manager Server LTS 4.3: from ? before 4.3.88-150400.3.113.5.
Published:Oct 30, 2025
Last Modified:Apr 15, 2026
EPS:Oct 30, 2025
EPSS Score:0.00054
CVSS Score:9.3
Affected Products
Vendor
Product
Action
Vendor
Suse
Product
Container Suse Manager 5.0
Suse
Container Suse Manager 5.0
Vendor
Suse
Product
Manager
Suse
Manager
Vendor
Suse
Product
Manager Server
Suse
Manager Server
Vendor
Suse
Product
Suse Manager Server Lts 4.3
Suse
Suse Manager Server Lts 4.3
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
