Known vulnerabilities in SUSE Enterprise Storage - page 142

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:suse_enterprise_storage:*:*:*:*:*:*:*:*
Total vulnerabilities: 4627
Public exploits: 201
Known exploited (KEV): 64
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Enterprise Storage SUSE Enterprise Storage is affected by 4627 known vulnerabilities: 42 critical, 786 high, 1334 medium, 2464 low Critical High Medium Low

Vulnerabilities (4627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74059 - Configuration
CWE-16 Low
No
No
- 27.03.2023 SB2023032756
#VU74055 - Improper input validation
CVE-2022-3854
CWE-20 Medium
No
No
- 27.03.2023 SB2023022857
SB2023032745
SB2023032746
and 3 more
#VU73959 - Configuration
CWE-16 Low
No
No
- 22.03.2023 SB2023032240
#VU73903 - Configuration
CWE-16 Low
No
No
- 21.03.2023 SB2023032167
#VU73898 - Configuration
CWE-16 Low
No
No
- 21.03.2023 SB2023032160
#VU73897 - Configuration
CWE-16 Low
No
No
- 21.03.2023 SB2023032159
#VU73895 - Permissions, Privileges, and Access Controls
CVE-2022-42334
CWE-264 Low
No
No
- 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 11 more
#VU73894 - Permissions, Privileges, and Access Controls
CVE-2022-42333
CWE-264 Low
No
No
- 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 11 more
#VU73893 - Use After Free
CVE-2022-42332
CWE-416 Medium
No
No
- 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 12 more
#VU73892 - Processor optimization removal or modification of security-critical code
CVE-2022-42331
CWE-1037 Medium
No
No
- 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 12 more
#VU73264 - Incorrect Calculation
CVE-2023-24532
CWE-682 High
No
No
- 13.03.2023 SB2023031318
SB2023031319
SB2023031537
and 43 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690
CWE-113 Medium
Available
No
- 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-27522
CWE-113 Medium
No
No
- 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 33 more
#VU72630 - Incorrect Default Permissions
CVE-2022-3650
CWE-276 Low
No
No
- 28.02.2023 SB2023022857
SB2023022873
SB2023030907
and 10 more
#VU72618 - Improper input validation
CVE-2023-24329
CWE-20 Medium
No
No
- 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU71136 - Out-of-bounds read
CVE-2022-4144
CWE-125 Medium
No
No
- 12.01.2023 SB2023011233
SB2023011254
SB20230118102
and 12 more
#VU66440 - Permissions, Privileges, and Access Controls
CVE-2022-0670
CWE-264 Medium
No
No
- 12.08.2022 SB2022081213
SB2022081215
SB2022081223
and 10 more
#VU64569 - Heap-based Buffer Overflow
CVE-2021-3507
CWE-122 Medium
No
No
- 21.06.2022 SB2021050640
SB2022062124
SB2022102676
and 9 more
#VU48696 - Out-of-bounds read
CVE-2020-29130
CWE-125 Medium
No
No
- 27.11.2020 SB2020112716
SB2020120311
SB2020120506
and 8 more
#VU48695 - Out-of-bounds read
CVE-2020-29129
CWE-125 Medium
No
No
- 26.11.2020 SB2020112716
SB2020120310
SB2020120506
and 6 more


Showing elements 2821 - 2840 out of 4627