Known vulnerabilities in SUSE Enterprise Storage 7.1 - page 136

Vendor: SUSE
Version: 7.1
Software CPE: cpe:2.3:o:suse:suse_enterprise_storage:*:*:*:*:*:*:*:*
Total vulnerabilities: 3964
Public exploits: 168
Known exploited (KEV): 51
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Enterprise Storage version 7.1 SUSE Enterprise Storage 7.1 is affected by 3964 vulnerabilities: 34 critical, 660 high, 1110 medium, 2159 low Critical High Medium Low

Vulnerabilities (3964)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75996 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-30772
CWE-362 Low
No
No
- 10.05.2023 SB2023051050
SB2023051052
SB2023051053
and 42 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400
CWE-79 Medium
No
No
- 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540
CWE-94 Medium
No
No
- 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539
CWE-79 Medium
No
No
- 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU75667 - Use After Free
CVE-2022-48434
CWE-416 High
No
No
- 02.05.2023 SB2023050236
SB2023050251
SB2023050702
and 13 more
#VU75537 - Memory corruption
CWE-119 High
No
No
- 27.04.2023 SB2023042702
SB2023042707
SB2023050905
#VU75536 - Out-of-bounds read
CWE-125 Low
No
No
- 27.04.2023 SB2023042702
SB2023042707
SB2023050905
#VU75535 - Use After Free
CWE-416 High
No
No
- 27.04.2023 SB2023042702
SB2023042707
SB2023050905
#VU75486 - Improper input validation
CVE-2023-29007
CWE-20 Low
Public exploit available
No
- 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75485 - Insufficient Verification of Data Authenticity
CVE-2023-25815
CWE-345 Low
No
No
- 25.04.2023 SB2023042553
SB2023042610
SB2023042638
and 40 more
#VU75484 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-25652
CWE-59 Low
No
No
- 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75482 - Integer overflow
CVE-2022-48468
CWE-190 High
No
No
- 25.04.2023 SB2022072825
SB2023042551
SB2023050992
and 50 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538
CWE-94 High
No
No
- 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537
CWE-835 Medium
No
No
- 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536
CWE-399 Medium
No
No
- 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74571 - Resource exhaustion
CVE-2023-24534
CWE-400 Medium
No
No
- 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915
CWE-113 Medium
No
No
- 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881
CWE-835 Medium
No
No
- 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823
CWE-378 Low
No
No
- 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550
CWE-94 Medium
No
No
- 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more


Showing elements 2701 - 2720 out of 3964