Known vulnerabilities in SUSE Linux Enterprise High Availability 15-SP2

Vendor: SUSE
Software: SUSE Linux Enterprise High Availability
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_high_availability:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 306
Public exploits: 17
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise High Availability version 15-SP2 SUSE Linux Enterprise High Availability 15-SP2 is affected by 306 vulnerabilities: 14 high, 46 medium, 246 low Critical High Medium Low

Vulnerabilities (306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72334 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-25725		 CWE-444 Medium
No
No
 - 16.02.2023 SB2023021659
SB2023021662
SB2023021663
and 22 more
#VU71581 - NULL Pointer Dereference
CVE-2022-3115		 CWE-476 Low
No
No
 - 26.01.2023 SB2023012560
SB2023012648
SB2023012649
and 9 more
#VU71579 - NULL Pointer Dereference
CVE-2022-3112		 CWE-476 Low
No
No
 - 26.01.2023 SB2023012560
SB2023012648
SB2023012649
and 7 more
#VU71541 - Improper Access Control
CVE-2022-4662		 CWE-284 Low
No
No
 - 25.01.2023 SB2023012561
SB2023012565
SB2023012626
and 38 more
#VU71539 - Unchecked Return Value
CVE-2022-3108		 CWE-252 Low
No
No
 - 25.01.2023 SB2023012560
SB2023012565
SB2023012626
and 30 more
#VU71538 - NULL Pointer Dereference
CVE-2022-3107		 CWE-476 Low
No
No
 - 25.01.2023 SB2023012560
SB2023012565
SB2023012626
and 20 more
#VU71536 - NULL Pointer Dereference
CVE-2022-3105		 CWE-476 Low
No
No
 - 25.01.2023 SB2023012560
SB2023012565
SB2023012648
and 7 more
#VU71482 - Use After Free
CVE-2023-0266		 CWE-416 High
No
Exploited
 - 24.01.2023 SB2023012447
SB2023012450
SB2023012651
and 88 more
#VU71479 - NULL Pointer Dereference
CVE-2022-47929		 CWE-476 Medium
No
No
 - 24.01.2023 SB2023012444
SB2023012450
SB2023012651
and 62 more
#VU71478 - Type confusion
CVE-2023-23454		 CWE-843 Low
No
No
 - 24.01.2023 SB2023012443
SB2023012450
SB2023012626
and 91 more
#VU71477 - Type confusion
CVE-2023-23455		 CWE-843 Low
No
No
 - 24.01.2023 SB2023012442
SB2023012450
SB2023012651
and 86 more
#VU71431 - Improper input validation
CVE-2023-0056		 CWE-20 Medium
No
No
 - 23.01.2023 SB2023012331
SB2023012332
SB2023012641
and 20 more
#VU71308 - Improper input validation
CVE-2023-22792		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011833
SB2023021735
SB2023021739
and 4 more
#VU71307 - Improper input validation
CVE-2023-22795		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011833
SB2023021735
SB2023021739
and 5 more
#VU70627 - Out-of-bounds read
CVE-2022-47520		 CWE-125 Low
No
No
 - 03.01.2023 SB2023010309
SB2023012648
SB2023012649
and 25 more
#VU70499 - Out-of-bounds read
CVE-2022-3435		 CWE-125 Medium
No
No
 - 27.12.2022 SB2022122717
SB2022122722
SB2022122723
and 48 more
#VU70470 - Resource Management Errors
CVE-2022-42329		 CWE-399 Medium
No
No
 - 21.12.2022 SB2022122163
SB2022122164
SB2022122165
and 43 more
#VU70469 - Resource Management Errors
CVE-2022-42328		 CWE-399 Medium
No
No
 - 21.12.2022 SB2022122163
SB2022122164
SB2022122165
and 45 more
#VU70468 - Improper input validation
CVE-2022-3643		 CWE-20 Medium
No
No
 - 21.12.2022 SB2022122149
SB2022122164
SB2022122165
and 46 more
#VU69799 - Use After Free
CVE-2022-3564		 CWE-416 Low
No
No
 - 01.12.2022 SB2022120131
SB2022120150
SB2022120156
and 97 more


Showing elements 1 - 20 out of 306