Known vulnerabilities in SUSE Enterprise Storage - page 145

Vendor: SUSE
Software: SUSE Enterprise Storage
Software CPE: cpe:2.3:o:suse:suse_enterprise_storage:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 4627
Public exploits: 201
Known exploited (KEV): 64
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Enterprise Storage SUSE Enterprise Storage is affected by 4627 known vulnerabilities: 42 critical, 786 high, 1334 medium, 2464 low Critical High Medium Low

Vulnerabilities (4627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73721 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41722		 CWE-22 Medium
No
No
 - 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 13 more
#VU72649 - Integer overflow
CVE-2023-25155		 CWE-190 Low
No
No
 - 01.03.2023 SB2023030105
SB2023031014
SB2023031036
and 20 more
#VU72634 - Resource exhaustion
CVE-2022-36021		 CWE-400 Medium
No
No
 - 28.02.2023 SB2023022869
SB2023031014
SB2023031036
and 17 more
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339		 CWE-78 High
No
No
 - 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU72573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48337		 CWE-78 High
No
No
 - 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 42 more
#VU72404 - Incorrect Regular Expression
CVE-2023-24807		 CWE-185 Medium
No
No
 - 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 34 more
#VU72403 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-23936		 CWE-113 Medium
No
No
 - 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 35 more
#VU72400 - Permissions, Privileges, and Access Controls
CVE-2023-23920		 CWE-264 Low
No
No
 - 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 55 more
#VU72399 - Resource Management Errors
CVE-2023-23919		 CWE-399 Medium
No
No
 - 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 33 more
#VU72398 - Permissions, Privileges, and Access Controls
CVE-2023-23918		 CWE-264 Medium
No
No
 - 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 48 more
#VU72088 - Out-of-bounds read
CVE-2022-41862		 CWE-125 Medium
No
No
 - 09.02.2023 SB2023020953
SB2023021334
SB2023021335
and 47 more
#VU71377 - Improper input validation
CVE-2022-40898		 CWE-20 Medium
No
No
 - 20.01.2023 SB2023012007
SB2023012013
SB2023012014
and 22 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU70433 - Stack-based buffer overflow
CVE-2022-46340		 CWE-121 Low
No
No
 - 20.12.2022 SB2022122002
SB2022122003
SB2022122004
and 47 more
#VU69392 - Resource exhaustion
CVE-2022-45061		 CWE-400 Medium
No
No
 - 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU69391 - Deserialization of Untrusted Data
CVE-2022-42919		 CWE-502 Low
No
No
 - 16.11.2022 SB2022111649
SB2022111655
SB2022111656
and 35 more
#VU68887 - Integer overflow
CVE-2022-37454		 CWE-190 High
Available
No
 - 01.11.2022 SB2022110118
SB2022110119
SB2022110209
and 69 more
#VU67055 - Integer overflow
CVE-2022-38784		 CWE-190 High
No
No
 - 07.09.2022 SB2022090713
SB2022090716
SB2022091306
and 17 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107		 CWE-78 High
No
No
 - 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU54903 - Use After Free
CVE-2021-30560		 CWE-416 High
No
No
 - 15.07.2021 SB2021071511
SB2021071607
SB2021071611
and 27 more


Showing elements 2881 - 2900 out of 4627