Known vulnerabilities in SUSE Enterprise Storage 7

Vendor: SUSE
Software: SUSE Enterprise Storage
Version: 7
Software CPE: cpe:2.3:o:suse:suse_enterprise_storage:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 166
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Enterprise Storage version 7 SUSE Enterprise Storage 7 is affected by 166 vulnerabilities: 51 high, 38 medium, 77 low Critical High Medium Low

Vulnerabilities (166)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 - 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64763 - Memory corruption
CVE-2022-34484		 CWE-119 High
No
No
 - 29.06.2022 SB2022062901
SB2022062902
SB2022062903
and 37 more
#VU64762 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-2200		 CWE-94 Medium
No
No
 - 29.06.2022 SB2022062901
SB2022062902
SB2022062903
and 36 more
#VU64761 - Improper Authorization in Handler for Custom URL Scheme
CVE-2022-34478		 CWE-939 Medium
No
No
 - 29.06.2022 SB2022062901
SB2022062902
SB2022062903
and 14 more
#VU64760 - Error Handling
CVE-2022-34472		 CWE-388 Low
No
No
 - 29.06.2022 SB2022062901
SB2022062902
SB2022062903
and 38 more
#VU64756 - Integer overflow
CVE-2022-34481		 CWE-190 Medium
No
No
 - 29.06.2022 SB2022062901
SB2022062902
SB2022062903
and 42 more
#VU64752 - Security Features
CVE-2022-34468		 CWE-254 Medium
No
No
 - 28.06.2022 SB2022062901
SB2022062902
SB2022062903
and 37 more
#VU64751 - Use After Free
CVE-2022-34470		 CWE-416 High
No
No
 - 28.06.2022 SB2022062901
SB2022062902
SB2022062903
and 37 more
#VU64750 - Improper Restriction of Rendered UI Layers or Frames
CVE-2022-34479		 CWE-1021 Medium
No
No
 - 28.06.2022 SB2022062901
SB2022062902
SB2022062903
and 37 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208		 CWE-347 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64682 - Resource exhaustion
CVE-2022-32206		 CWE-400 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 - 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU64007 - Resource exhaustion
CVE-2022-31030		 CWE-400 Medium
No
No
 - 07.06.2022 SB2022060702
SB2022061206
SB2022061326
and 23 more
#VU63881 - Security Features
CVE-2022-31744		 CWE-254 Medium
No
No
 - 31.05.2022 SB2022053116
SB2022061323
SB2022062901
and 32 more
#VU63827 - Use After Free
CVE-2021-46669		 CWE-416 Medium
No
No
 - 31.05.2022 SB2022061533
SB2022061727
SB2022062431
and 27 more
#VU63508 - Use After Free
CVE-2022-27377		 CWE-416 Low
No
No
 - 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 23 more
#VU63507 - Use After Free
CVE-2022-27376		 CWE-416 Low
No
No
 - 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 20 more
#VU63090 - Permissions, Privileges, and Access Controls
CVE-2022-29162		 CWE-264 Medium
No
No
 - 12.05.2022 SB2022051205
SB2022062435
SB2022071158
and 32 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Public exploit available
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU62418 - Improper input validation
CVE-2022-21427		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041949
SB2022050323
SB2022050434
and 24 more


Showing elements 1 - 20 out of 166