Known vulnerabilities in Public Cloud Module 15-SP3

Vendor: SUSE
Software: Public Cloud Module
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:public_cloud_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 38
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Public Cloud Module version 15-SP3 Public Cloud Module 15-SP3 is affected by 38 vulnerabilities: 3 high, 26 medium, 9 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 - 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 53 more
#VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-53643		 CWE-444 Medium
No
No
 - 18.07.2025 SB2025071857
SB2025090377
SB2025091303
and 15 more
#VU112882 - Uncontrolled Recursion
CVE-2025-4565		 CWE-674 Medium
No
No
 - 14.07.2025 SB2025071429
SB2025071430
SB2025071431
and 21 more
#VU107611 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-6827		 CWE-444 High
No
No
 - 18.04.2025 SB2025041831
SB2025041832
SB2025041834
and 15 more
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Public exploit available
No
 - 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU105535 - Command injection
CVE-2025-24049		 CWE-77 Low
No
No
 - 11.03.2025 SB2025031172
SB2025032640
SB2025040993
and 2 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 - 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU104138 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-45339		 CWE-59 Low
No
No
 - 21.02.2025 SB2025022137
SB2025022138
SB2025022141
and 35 more
#VU103421 - Argument Injection or Modification
CVE-2025-21613		 CWE-88 Low
No
No
 - 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 27 more
#VU101777 - Improper Authorization
CVE-2024-45337		 CWE-285 Medium
Public exploit available
No
 - 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU100600 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-52304		 CWE-444 Medium
No
No
 - 19.11.2024 SB2024111901
SB2024111916
SB2024111917
and 19 more
#VU92084 - Protection Mechanism Failure
CVE-2024-28103		 CWE-693 Low
No
No
 - 13.06.2024 SB20240613110
SB20240613114
SB20240613115
and 5 more
#VU91723 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-35255		 CWE-362 Low
No
No
 - 11.06.2024 SB20240611248
SB2024091320
SB2024091965
and 15 more
#VU91160 - Improper input validation
CVE-2024-24790		 CWE-20 Medium
No
No
 - 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-1135		 CWE-444 Medium
No
No
 - 06.05.2024 SB2024050631
SB2024050632
SB2024050633
and 40 more
#VU89159 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30251		 CWE-835 Medium
No
No
 - 06.05.2024 SB2024050618
SB2024061929
SB2024072506
and 12 more
#VU88804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27306		 CWE-79 Medium
No
No
 - 18.04.2024 SB2024041813
SB2024042444
SB2024042445
and 12 more
#VU87934 - Integer overflow
CVE-2024-21646		 CWE-190 Medium
No
No
 - 01.04.2024 SB2024040136
SB2024040138
#VU87933 - Use After Free
CVE-2024-25110		 CWE-416 Medium
No
No
 - 01.04.2024 SB2024040136
SB2024040139
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996		 CWE-942 Low
No
No
 - 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more


Showing elements 1 - 20 out of 38