Known vulnerabilities in Server Applications Module 15-SP4 - page 5

Vendor: SUSE
Software: Server Applications Module
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 102
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Server Applications Module version 15-SP4 Server Applications Module 15-SP4 is affected by 102 vulnerabilities: 8 high, 62 medium, 32 low Critical High Medium Low

Vulnerabilities (102)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75558 - Observable Response Discrepancy
 CWE-204 Medium
No
No
 - 27.04.2023 SB2023042736
SB2023042739
SB2023042801
and 1 more
#VU74576 - Configuration
 CWE-16 Low
No
No
 - 06.04.2023 SB2023040677
#VU74492 - Configuration
 CWE-16 Low
No
No
 - 05.04.2023 SB2023040552
#VU74490 - Configuration
 CWE-16 Low
No
No
 - 05.04.2023 SB2023040553
#VU74352 - NULL Pointer Dereference
CVE-2023-28625		 CWE-476 Medium
No
No
 - 04.04.2023 SB2023040417
SB2023041466
SB2023051853
and 7 more
#VU73895 - Permissions, Privileges, and Access Controls
CVE-2022-42334		 CWE-264 Low
No
No
 - 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 11 more
#VU73894 - Permissions, Privileges, and Access Controls
CVE-2022-42333		 CWE-264 Low
No
No
 - 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 11 more
#VU73893 - Use After Free
CVE-2022-42332		 CWE-416 Medium
No
No
 - 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 12 more
#VU73892 - Processor optimization removal or modification of security-critical code
CVE-2022-42331		 CWE-1037 Medium
No
No
 - 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 12 more
#VU73788 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-14394		 CWE-835 Medium
No
No
 - 17.03.2023 SB2023031732
SB2023031735
SB2023032138
and 7 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Public exploit available
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-27522		 CWE-113 Medium
No
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 33 more
#VU72707 - Out-of-bounds read
CVE-2023-1018		 CWE-125 Medium
No
No
 - 02.03.2023 SB2023030207
SB2023030210
SB2023030758
and 17 more
#VU72706 - Out-of-bounds write
CVE-2023-1017		 CWE-787 High
No
No
 - 02.03.2023 SB2023030207
SB2023030210
SB2023030758
and 16 more
#VU72470 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2022-27672		 CWE-1342 Low
No
No
 - 21.02.2023 SB2023022177
SB2023022178
SB2023030943
and 31 more
#VU72308 - Use After Free
CVE-2022-1050		 CWE-416 High
No
No
 - 15.02.2023 SB2023021578
SB2023030828
SB2023031735
and 8 more
#VU72088 - Out-of-bounds read
CVE-2022-41862		 CWE-125 Medium
No
No
 - 09.02.2023 SB2023020953
SB2023021334
SB2023021335
and 47 more
#VU71456 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-0241		 CWE-22 Low
No
No
 - 24.01.2023 SB2023012402
SB2023041812
SB20230816100
#VU71214 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-22298		 CWE-601 Low
No
No
 - 17.01.2023 SB2023011722
SB2023040332
SB2023081673
and 1 more
#VU64569 - Heap-based Buffer Overflow
CVE-2021-3507		 CWE-122 Medium
No
No
 - 21.06.2022 SB2021050640
SB2022062124
SB2022102676
and 9 more


Showing elements 81 - 100 out of 102