Known vulnerabilities in Public Cloud Module 15-SP2

Vendor: SUSE
Software: Public Cloud Module
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:public_cloud_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 28
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Public Cloud Module version 15-SP2 Public Cloud Module 15-SP2 is affected by 28 vulnerabilities: 3 high, 20 medium, 5 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100600 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-52304		 CWE-444 Medium
No
No
 - 19.11.2024 SB2024111901
SB2024111916
SB2024111917
and 19 more
#VU92084 - Protection Mechanism Failure
CVE-2024-28103		 CWE-693 Low
No
No
 - 13.06.2024 SB20240613110
SB20240613114
SB20240613115
and 5 more
#VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-1135		 CWE-444 Medium
No
No
 - 06.05.2024 SB2024050631
SB2024050632
SB2024050633
and 40 more
#VU89159 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30251		 CWE-835 Medium
No
No
 - 06.05.2024 SB2024050618
SB2024061929
SB2024072506
and 12 more
#VU88804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27306		 CWE-79 Medium
No
No
 - 18.04.2024 SB2024041813
SB2024042444
SB2024042445
and 12 more
#VU87934 - Integer overflow
CVE-2024-21646		 CWE-190 Medium
No
No
 - 01.04.2024 SB2024040136
SB2024040138
#VU87933 - Use After Free
CVE-2024-25110		 CWE-416 Medium
No
No
 - 01.04.2024 SB2024040136
SB2024040139
#VU87616 - Improper Privilege Management
CVE-2024-1753		 CWE-269 High
No
No
 - 19.03.2024 SB2024031925
SB2024032051
SB2024032613
and 41 more
#VU85747 - Observable discrepancy
CVE-2023-52323		 CWE-203 Low
No
No
 - 24.01.2024 SB2024012414
SB2024012416
SB2024022053
and 24 more
#VU84655 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-47641		 CWE-444 Medium
No
No
 - 21.12.2023 SB2023122152
SB2023122153
SB2024022135
and 2 more
#VU83632 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-49081		 CWE-444 Medium
No
No
 - 04.12.2023 SB2023120404
SB2023120408
SB2023121355
and 15 more
#VU77962 - Resource exhaustion
CVE-2018-1000518		 CWE-400 Medium
No
No
 - 05.07.2023 SB2018062630
SB2023070510
SB2023092027
and 3 more
#VU71261 - Improper input validation
CVE-2022-1941		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011780
SB2023011801
SB2023011802
and 24 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 - 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996		 CWE-942 Low
No
No
 - 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU65206 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30187		 CWE-200 Low
No
No
 - 12.07.2022 SB2022071250
SB2023112941
SB2024013105
and 2 more
#VU62403 - Improper input validation
CVE-2021-22570		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041949
SB2022062233
SB2022100638
and 34 more
#VU60181 - Resource Management Errors
CVE-2021-22569		 CWE-399 Medium
Public exploit available
No
 - 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU50367 - Covert Timing Channel
CVE-2020-25659		 CWE-385 Medium
No
No
 - 11.01.2021 SB2020111230
SB2021052024
SB2021060319
and 18 more
#VU46905 - Buffer overflow
CVE-2020-8927		 CWE-120 Medium
No
No
 - 15.09.2020 SB2020092215
SB2020092701
SB2020092704
and 40 more


Showing elements 1 - 20 out of 28