Known vulnerabilities in SUSE Enterprise Storage - page 103

Vendor: SUSE
Software: SUSE Enterprise Storage
Software CPE: cpe:2.3:o:suse:suse_enterprise_storage:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 4627
Public exploits: 201
Known exploited (KEV): 64
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Enterprise Storage SUSE Enterprise Storage is affected by 4627 known vulnerabilities: 42 critical, 786 high, 1334 medium, 2464 low Critical High Medium Low

Vulnerabilities (4627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87616 - Improper Privilege Management
CVE-2024-1753		 CWE-269 High
No
No
 - 19.03.2024 SB2024031925
SB2024032051
SB2024032613
and 41 more
#VU87208 - Out-of-bounds read
CVE-2023-48161		 CWE-125 Medium
No
No
 - 07.03.2024 SB2024030740
SB2024030741
SB2024060719
and 28 more
#VU87207 - Heap-based Buffer Overflow
CVE-2022-28506		 CWE-122 High
No
No
 - 07.03.2024 SB2024030740
SB2024030741
SB2022062452
and 9 more
#VU87206 - Missing release of memory after effective lifetime
CVE-2021-40633		 CWE-401 Medium
No
No
 - 07.03.2024 SB2024030740
SB2024030741
SB2024051326
and 11 more
#VU87185 - UNIX Symbolic Link (Symlink) Following
CVE-2023-6597		 CWE-61 Low
No
No
 - 07.03.2024 SB2024030718
SB2024030726
SB2024030727
and 88 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597		 CWE-89 High
No
No
 - 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU86855 - Improper Authorization
CVE-2022-0860		 CWE-285 Medium
No
No
 - 27.02.2024 SB2024022765
SB2024022766
SB2024022767
and 6 more
#VU86808 - Resource exhaustion
CVE-2024-22201		 CWE-400 Medium
No
No
 - 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU86768 - Improper Authentication
CVE-2023-52160		 CWE-287 Medium
Available
No
 - 23.02.2024 SB2024022343
SB2024022345
SB2024022346
and 11 more
#VU86733 - Improper input validation
CVE-2024-22025		 CWE-20 Medium
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 34 more
#VU86724 - Covert Timing Channel
CVE-2023-46809		 CWE-385 Medium
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 35 more
#VU86721 - Improper input validation
CVE-2024-22019		 CWE-20 Medium
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 48 more
#VU86709 - Exposure of sensitive information to an unauthorized actor
CVE-2024-24758		 CWE-200 Low
No
No
 - 22.02.2024 SB2024022211
SB2024022225
SB2024022832
and 13 more
#VU86707 - Server-Side Request Forgery (SSRF)
CVE-2024-24806		 CWE-918 Medium
No
No
 - 22.02.2024 SB2024022210
SB2024022214
SB2024022225
and 54 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 - 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 136 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 - 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 100 more
#VU86531 - Resource exhaustion
CVE-2024-24814		 CWE-400 Medium
No
No
 - 15.02.2024 SB2024021511
SB2024022245
SB2024030531
and 9 more
#VU85896 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-7207		 CWE-22 High
No
No
 - 30.01.2024 SB2024013015
SB2024013019
SB2024013020
and 12 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 - 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more


Showing elements 2041 - 2060 out of 4627