Known vulnerabilities in Advanced Systems Management Module 12

Vendor: SUSE
Software: Advanced Systems Management Module
Version: 12
Software CPE: cpe:2.3:o:suse:advanced_systems_management_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 8
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Advanced Systems Management Module version 12 Advanced Systems Management Module 12 is affected by 8 vulnerabilities: 3 medium, 5 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 - 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 - 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Public exploit available
No
 - 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU76397 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-28370		 CWE-601 Medium
No
No
 - 22.05.2023 SB2023052204
SB2023061333
SB2023062257
and 28 more
#VU75800 - Incorrect Default Permissions
CVE-2021-44215		 CWE-276 Low
No
No
 - 09.05.2023 SB2023050906
SB2023050910
#VU75799 - Incorrect Default Permissions
CVE-2021-44216		 CWE-276 Low
No
No
 - 09.05.2023 SB2023050906
SB2023050910
#VU68336 - UNIX Symbolic Link (Symlink) Following
CVE-2019-3698		 CWE-61 Low
No
No
 - 14.10.2022 SB2022101445
SB2024051429
SB2024061808
#VU1344 - UNIX Symbolic Link (Symlink) Following
CVE-2016-9566		 CWE-61 Low
Public exploit available
No
 - 16.12.2016 SB2016121601
SB2016123102
SB2022101445
and 2 more