CVE-2011-0467

8.8 highEPSS 1.3%

A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE Studio Onsite: versions prior to 1.0.3-0.18.1, SUSE Studio Onsite 1.1 Appliance: versions prior to 1.1.2-0.25.1.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2018-06-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

suse:studio_onsite
suse:studio_onsite_appliance

References

https://bugzilla.suse.com/show_bug.cgi?id=675039
https://www.suse.com/security/cve/CVE-2011-0467/
https://bugzilla.suse.com/show_bug.cgi?id=675039
https://www.suse.com/security/cve/CVE-2011-0467/

Check your stack JSON