Known vulnerabilities in SUSE Enterprise Storage 7.1 - page 134

Vendor: SUSE
Version: 7.1
Software CPE: cpe:2.3:o:suse:suse_enterprise_storage:*:*:*:*:*:*:*:*
Total vulnerabilities: 3964
Public exploits: 168
Known exploited (KEV): 51
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Enterprise Storage version 7.1 SUSE Enterprise Storage 7.1 is affected by 3964 vulnerabilities: 34 critical, 660 high, 1110 medium, 2159 low Critical High Medium Low

Vulnerabilities (3964)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76489 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-32700
CWE-78 High
No
No
- 25.05.2023 SB2023052503
SB2023052504
SB2023052505
and 13 more
#VU76474 - Improper input validation
CVE-2022-3294
CWE-20 Medium
No
No
- 24.05.2023 SB2023052426
SB2023052522
SB2023070826
and 7 more
#VU76383 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-24805
CWE-78 Medium
No
No
- 19.05.2023 SB2023051940
SB2023051946
SB2023051947
and 20 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322
CWE-440 Medium
No
No
- 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321
CWE-295 Medium
No
No
- 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU76235 - Improper Synchronization
CVE-2023-28320
CWE-662 Low
No
No
- 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 28 more
#VU76042 - Security Features
CVE-2023-2455
CWE-254 Low
No
No
- 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 61 more
#VU76041 - Permissions, Privileges, and Access Controls
CVE-2023-2454
CWE-264 Medium
No
No
- 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 55 more
#VU75874 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-32205
CWE-451 Medium
No
No
- 09.05.2023 SB2023050974
SB20230509129
SB2023051067
and 37 more
#VU75664 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30861
CWE-200 Medium
No
No
- 02.05.2023 SB2023050221
SB2023052227
SB2023052228
and 44 more
#VU75432 - Permissions, Privileges, and Access Controls
CVE-2023-30630
CWE-264 Low
No
No
- 24.04.2023 SB2023042410
SB2023042412
SB2023042642
and 51 more
#VU74579 - Improper input validation
CVE-2023-1668
CWE-20 Medium
No
No
- 06.04.2023 SB2023040683
SB2023041403
SB2023041414
and 15 more
#VU73726 - Improper input validation
CVE-2023-27530
CWE-20 Medium
No
No
- 15.03.2023 SB2023031545
SB2023031551
SB2023042535
and 18 more
#VU73274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28120
CWE-79 Medium
No
No
- 14.03.2023 SB2023031410
SB2023041501
SB2023042648
and 13 more
#VU72477 - Incorrect Calculation
CVE-2022-33972
CWE-682 Low
No
No
- 21.02.2023 SB2023022189
SB2023022190
SB2023022707
and 21 more
#VU71364 - Improper Access Control
CVE-2022-3162
CWE-284 Low
No
No
- 19.01.2023 SB2023011938
SB2023011939
SB2023020908
and 17 more
#VU70471 - Out-of-bounds read
CVE-2022-4337
CWE-125 Medium
No
No
- 21.12.2022 SB2022122109
SB2023011401
SB2023020902
and 18 more
#VU70459 - Integer underflow
CVE-2022-4338
CWE-191 High
No
No
- 21.12.2022 SB2022122109
SB2023011401
SB2023020902
and 21 more
#VU69691 - Use of Password Hash Instead of Password for Authentication
CVE-2022-46146
CWE-836 Low
No
No
- 29.11.2022 SB2022112926
SB2022113012
SB2023022044
and 33 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191
CWE-327 Medium
No
No
- 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more


Showing elements 2661 - 2680 out of 3964