Known vulnerabilities in SUSE Studio Onsite

Known vulnerabilities in SUSE Studio Onsite

Vendor: Novell

Software: SUSE Studio Onsite

Software CPE: cpe:2.3:a:novell:suse_studio_onsite:*:*:*:*:*:*:*:*

Website: https://www.microfocus.com/novell/?utm_medium=301&utm_source=novell.com

Total vulnerabilities: 14

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU5215 - Exposed Dangerous Method or Function CVE-2014-3568	CWE-749	Low	No	No	-	20.01.2017	SB2014101601 SB2015092611 SB2014101501 and 17 more
#VU5214 - Use of a Broken or Risky Cryptographic Algorithm CVE-2014-3566	CWE-327	Medium	Available	No	-	20.01.2017	SB2014101601 SB2014102102 SB2016022401 and 78 more
#VU5213 - Missing release of memory after effective lifetime CVE-2014-3567	CWE-401	Medium	No	No	-	20.01.2017	SB2014101601 SB2015101602 SB2015092611 and 20 more
#VU44787 - Improper input validation CVE-2011-2225	CWE-20	High	No	No	-	24.08.2011	SB2011082403
#VU44788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2011-2226	CWE-79	Low	No	No	-	24.08.2011	SB2011082403
#VU44789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2011-2644	CWE-79	Low	No	No	-	24.08.2011	SB2011082403
#VU44790 - Improper input validation CVE-2011-2645	CWE-20	Medium	No	No	-	24.08.2011	SB2011082403
#VU44791 - Improper input validation CVE-2011-2646	CWE-20	Medium	No	No	-	24.08.2011	SB2011082403
#VU44792 - Improper input validation CVE-2011-2647	CWE-20	Medium	No	No	-	24.08.2011	SB2011082403
#VU44793 - Improper input validation CVE-2011-2648	CWE-20	Medium	No	No	-	24.08.2011	SB2011082403
#VU44794 - Improper input validation CVE-2011-2649	CWE-20	Medium	No	No	-	24.08.2011	SB2011082403
#VU44795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2011-2650	CWE-79	Low	No	No	-	24.08.2011	SB2011082403
#VU44796 - Improper input validation CVE-2011-2651	CWE-20	Medium	No	No	-	24.08.2011	SB2011082403
#VU44797 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2011-2652	CWE-79	Low	No	No	-	24.08.2011	SB2011082403