Known vulnerabilities in Server Applications Module 15-SP4

Vendor: SUSE
Software: Server Applications Module
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 102
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Server Applications Module version 15-SP4 Server Applications Module 15-SP4 is affected by 102 vulnerabilities: 8 high, 62 medium, 32 low Critical High Medium Low

Vulnerabilities (102)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84727 - Command injection
CVE-2023-51764		 CWE-77 Medium
Public exploit available
No
 - 24.12.2023 SB2023122403
SB2023122615
SB2023122811
and 11 more
#VU83629 - Out-of-bounds read
CVE-2023-49285		 CWE-125 Medium
No
No
 - 03.12.2023 SB2023120303
SB2023121253
SB2023121254
and 22 more
#VU83628 - Unchecked Return Value
CVE-2023-49286		 CWE-252 Medium
No
No
 - 03.12.2023 SB2023120303
SB2023121253
SB2023121254
and 20 more
#VU83439 - Insufficiently Protected Credentials
CVE-2023-35789		 CWE-522 Low
No
No
 - 22.11.2023 SB2023112242
SB20231018146
SB2023112309
and 6 more
#VU83434 - Insufficient Verification of Data Authenticity
CVE-2023-5366		 CWE-345 Low
No
No
 - 22.11.2023 SB2023112235
SB2023112236
SB2023112701
and 15 more
#VU83379 - NULL Pointer Dereference
CVE-2023-46728		 CWE-476 Medium
No
No
 - 21.11.2023 SB2023090612
SB2023112157
SB2023112458
and 21 more
#VU83163 - Security Features
CVE-2023-46836		 CWE-254 Medium
No
No
 - 15.11.2023 SB2023111513
SB2023111515
SB2023111516
and 11 more
#VU83162 - Permissions, Privileges, and Access Controls
CVE-2023-46835		 CWE-264 Medium
No
No
 - 15.11.2023 SB2023111512
SB2023111515
SB2023111516
and 12 more
#VU82944 - UNIX Symbolic Link (Symlink) Following
CVE-2023-34049		 CWE-61 Low
No
No
 - 09.11.2023 SB2023110931
SB2023110932
SB2023110933
and 17 more
#VU82943 - Permissions, Privileges, and Access Controls
CVE-2023-5870		 CWE-264 Low
No
No
 - 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 54 more
#VU82942 - Integer overflow
CVE-2023-5869		 CWE-190 High
No
No
 - 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 70 more
#VU82941 - Exposure of sensitive information to an unauthorized actor
CVE-2023-5868		 CWE-200 Low
No
No
 - 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 53 more
#VU82906 - Improper Certificate Validation
CVE-2023-46724		 CWE-295 Medium
No
No
 - 08.11.2023 SB2023102416
SB2023110805
SB2023110806
and 21 more
#VU82902 - Improper input validation
CVE-2023-46753		 CWE-20 Medium
No
No
 - 07.11.2023 SB20231107126
SB2023111547
SB2023111548
and 9 more
#VU82901 - Improper input validation
CVE-2023-46752		 CWE-20 Medium
No
No
 - 07.11.2023 SB20231107126
SB2023111548
SB2023111715
and 8 more
#VU82551 - Resource exhaustion
CVE-2023-46118		 CWE-400 Low
No
No
 - 30.10.2023 SB2023103008
SB2023112152
SB2023120201
and 3 more
#VU82547 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46137		 CWE-444 Medium
No
No
 - 30.10.2023 SB2023103002
SB2023112046
SB2023112942
and 16 more
#VU82315 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46846		 CWE-444 Medium
No
No
 - 24.10.2023 SB2023102416
SB2023110745
SB2023110746
and 25 more
#VU82248 - Out-of-bounds read
CVE-2023-31122		 CWE-125 Medium
No
No
 - 19.10.2023 SB2023101942
SB2023101960
SB2023102101
and 42 more
#VU15703 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-11759		 CWE-22 Medium
Public exploit available
No
 - 03.11.2018 SB2018110301
SB2018121010
SB2018122105
and 1 more


Showing elements 1 - 20 out of 102