Known vulnerabilities in SUSE Enterprise Storage 7.1 - page 141

Vendor: SUSE
Software: SUSE Enterprise Storage
Version: 7.1
Software CPE: cpe:2.3:o:suse:suse_enterprise_storage:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3964
Public exploits: 168
Known exploited (KEV): 51
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Enterprise Storage version 7.1 SUSE Enterprise Storage 7.1 is affected by 3964 vulnerabilities: 34 critical, 660 high, 1110 medium, 2159 low Critical High Medium Low

Vulnerabilities (3964)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74206 - Configuration
 CWE-16 Low
No
No
 - 30.03.2023 SB2023033047
#VU74202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-4065		 CWE-22 High
No
No
 - 30.03.2023 SB2023033036
SB2023033043
SB2023102718
and 4 more
#VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28487		 CWE-78 Low
No
No
 - 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 28 more
#VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28486		 CWE-78 Low
No
No
 - 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 31 more
#VU74180 - Use After Free
CVE-2023-1393		 CWE-416 Low
No
No
 - 29.03.2023 SB2023032954
SB2023032961
SB2023032962
and 41 more
#VU74179 - Improper Access Control
CVE-2023-0614		 CWE-284 Medium
No
No
 - 29.03.2023 SB2023032949
SB2023032950
SB2023032969
and 14 more
#VU74178 - Permissions, Privileges, and Access Controls
CVE-2023-0225		 CWE-264 Low
No
No
 - 29.03.2023 SB2023032949
SB2023032950
SB2023032969
and 8 more
#VU74177 - Cleartext Transmission of Sensitive Information
CVE-2023-0922		 CWE-319 Low
No
No
 - 29.03.2023 SB2023032949
SB2023032950
SB2023032951
and 18 more
#VU74059 - Configuration
 CWE-16 Low
No
No
 - 27.03.2023 SB2023032756
#VU74055 - Improper input validation
CVE-2022-3854		 CWE-20 Medium
No
No
 - 27.03.2023 SB2023022857
SB2023032745
SB2023032746
and 3 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Public exploit available
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-27522		 CWE-113 Medium
No
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 33 more
#VU72630 - Incorrect Default Permissions
CVE-2022-3650		 CWE-276 Low
No
No
 - 28.02.2023 SB2023022857
SB2023022873
SB2023030907
and 10 more
#VU72339 - Resource exhaustion
CVE-2023-25577		 CWE-400 Medium
No
No
 - 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU71585 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 - 26.01.2023 SB2023012653
SB2023032944
SB2023041866
and 5 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Public exploit available
No
 - 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70039 - Resource exhaustion
CVE-2022-23471		 CWE-400 Medium
No
No
 - 08.12.2022 SB2022120802
SB2022121324
SB2022122112
and 27 more
#VU69283 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 - 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more
#VU66440 - Permissions, Privileges, and Access Controls
CVE-2022-0670		 CWE-264 Medium
No
No
 - 12.08.2022 SB2022081213
SB2022081215
SB2022081223
and 10 more
#VU65827 - Use After Free
CVE-2022-32746		 CWE-416 Low
No
No
 - 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 30 more


Showing elements 2801 - 2820 out of 3964