Known vulnerabilities in SUSE Linux Enterprise High Availability 15-SP1

Vendor: SUSE
Software: SUSE Linux Enterprise High Availability
Version: 15-SP1
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_high_availability:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 269
Public exploits: 12
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise High Availability version 15-SP1 SUSE Linux Enterprise High Availability 15-SP1 is affected by 269 vulnerabilities: 9 high, 43 medium, 217 low Critical High Medium Low

Vulnerabilities (269)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72334 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-25725		 CWE-444 Medium
No
No
 - 16.02.2023 SB2023021659
SB2023021662
SB2023021663
and 22 more
#VU72084 - Incorrect Regular Expression
CVE-2023-22799		 CWE-185 Medium
No
No
 - 09.02.2023 SB2023020945
SB2023020951
SB2023112747
and 4 more
#VU71978 - Resource exhaustion
CVE-2022-44572		 CWE-400 Medium
No
No
 - 07.02.2023 SB2023020708
SB2023020711
SB2023030241
and 10 more
#VU71977 - Resource exhaustion
CVE-2022-44571		 CWE-400 Medium
No
No
 - 07.02.2023 SB2023020708
SB2023020711
SB2023030241
and 11 more
#VU71974 - Resource exhaustion
CVE-2022-44570		 CWE-400 Medium
No
No
 - 07.02.2023 SB2023020708
SB2023020711
SB2023030241
and 11 more
#VU71542 - Incorrect Regular Expression
CVE-2020-7663		 CWE-185 Medium
No
No
 - 25.01.2023 SB2023012562
SB2023012564
SB2022030738
and 2 more
#VU71541 - Improper Access Control
CVE-2022-4662		 CWE-284 Low
No
No
 - 25.01.2023 SB2023012561
SB2023012565
SB2023012626
and 38 more
#VU71539 - Unchecked Return Value
CVE-2022-3108		 CWE-252 Low
No
No
 - 25.01.2023 SB2023012560
SB2023012565
SB2023012626
and 30 more
#VU71538 - NULL Pointer Dereference
CVE-2022-3107		 CWE-476 Low
No
No
 - 25.01.2023 SB2023012560
SB2023012565
SB2023012626
and 20 more
#VU71486 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-20251		 CWE-362 Low
No
No
 - 24.01.2023 SB2023012451
SB2023012452
SB2023012453
and 13 more
#VU71479 - NULL Pointer Dereference
CVE-2022-47929		 CWE-476 Medium
No
No
 - 24.01.2023 SB2023012444
SB2023012450
SB2023012651
and 62 more
#VU71478 - Type confusion
CVE-2023-23454		 CWE-843 Low
No
No
 - 24.01.2023 SB2023012443
SB2023012450
SB2023012626
and 91 more
#VU71431 - Improper input validation
CVE-2023-0056		 CWE-20 Medium
No
No
 - 23.01.2023 SB2023012331
SB2023012332
SB2023012641
and 20 more
#VU71308 - Improper input validation
CVE-2023-22792		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011833
SB2023021735
SB2023021739
and 4 more
#VU71307 - Improper input validation
CVE-2023-22795		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011833
SB2023021735
SB2023021739
and 5 more
#VU71303 - Improper input validation
CVE-2023-22796		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011833
SB2023020662
SB2023030334
and 7 more
#VU69799 - Use After Free
CVE-2022-3564		 CWE-416 Low
No
No
 - 01.12.2022 SB2022120131
SB2022120150
SB2022120156
and 97 more
#VU69151 - Security Features
CVE-2022-38023		 CWE-254 High
No
No
 - 09.11.2022 SB2022110912
SB2022121537
SB2022121801
and 46 more
#VU69094 - Permissions, Privileges, and Access Controls
CVE-2022-37966		 CWE-264 High
No
No
 - 08.11.2022 SB2022110822
SB2022121537
SB2022121801
and 23 more
#VU63923 - Improper Access Control
CVE-2021-4037		 CWE-284 Low
No
No
 - 02.06.2022 SB2022060205
SB2022060206
SB2022062928
and 37 more


Showing elements 1 - 20 out of 269