Known vulnerabilities in SUSE Linux Enterprise Desktop 15 SP4 LTSS

Vendor: SUSE
Software: SUSE Linux Enterprise Desktop 15 SP4 LTSS
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_desktop_15_sp4_ltss:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1208
Public exploits: 34
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Desktop 15 SP4 LTSS SUSE Linux Enterprise Desktop 15 SP4 LTSS is affected by 1208 known vulnerabilities: 6 critical, 106 high, 187 medium, 909 low Critical High Medium Low

Vulnerabilities (1208)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101942 - Incorrect Default Permissions
CVE-2024-21820		 CWE-276 Low
No
No
 - 27.12.2024 SB2024122731
SB2024122734
SB2024122735
and 11 more
#VU101941 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-23918		 CWE-754 Low
No
No
 - 27.12.2024 SB2024122731
SB2024122734
SB2024122735
and 14 more
#VU101936 - Improper Finite State Machines (FSMs) in Hardware Logic
CVE-2024-21853		 CWE-1245 Low
No
No
 - 27.12.2024 SB2024122729
SB2024122734
SB2024122735
and 14 more
#VU100447 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11159		 CWE-200 Low
No
No
 - 13.11.2024 SB2024111333
SB2024111603
SB2024112544
and 12 more
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 - 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 37 more
#VU99490 - Memory corruption
CVE-2024-10467		 CWE-119 High
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99489 - Resource Management Errors
CVE-2024-10466		 CWE-399 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99488 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10465		 CWE-357 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99487 - Resource Management Errors
CVE-2024-10464		 CWE-399 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99486 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-10462		 CWE-451 Medium
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10461		 CWE-79 Medium
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99484 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10460		 CWE-357 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99482 - Exposure of sensitive information to an unauthorized actor
CVE-2024-10463		 CWE-200 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99481 - Use After Free
CVE-2024-10459		 CWE-416 High
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99480 - Permissions, Privileges, and Access Controls
CVE-2024-10458		 CWE-264 Medium
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98498 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28168		 CWE-611 Medium
No
No
 - 14.10.2024 SB2024101462
SB2024101465
SB2024112829
and 18 more
#VU97424 - Observable discrepancy
CVE-2024-23984		 CWE-203 Low
No
No
 - 17.09.2024 SB2024091724
SB2024091725
SB2024091726
and 20 more
#VU97423 - State Issues
CVE-2024-24968		 CWE-371 Low
No
No
 - 17.09.2024 SB2024091723
SB2024091725
SB2024091726
and 18 more
#VU82245 - Resource Management Errors
CVE-2023-45802		 CWE-399 Medium
No
No
 - 19.10.2023 SB2023101942
SB2023101960
SB2023102104
and 37 more


Showing elements 1 - 20 out of 1208