Known vulnerabilities in SUSE Linux Enterprise High Availability 15-SP2 - page 8

Vendor: SUSE
Software: SUSE Linux Enterprise High Availability
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_high_availability:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 306
Public exploits: 17
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise High Availability version 15-SP2 SUSE Linux Enterprise High Availability 15-SP2 is affected by 306 vulnerabilities: 14 high, 46 medium, 246 low Critical High Medium Low

Vulnerabilities (306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68860 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31163		 CWE-22 Medium
No
No
 - 31.10.2022 SB2022103147
SB2022103161
SB2022072942
and 6 more
#VU65903 - Permissions, Privileges, and Access Controls
CVE-2022-2553		 CWE-264 Low
No
No
 - 01.08.2022 SB2022080105
SB2022080113
SB2022080114
and 12 more
#VU65824 - Missing release of memory after effective lifetime
CVE-2022-32742		 CWE-401 Low
No
No
 - 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 36 more
#VU64863 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-30123		 CWE-78 High
No
No
 - 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 14 more
#VU64862 - Improper input validation
CVE-2022-30122		 CWE-20 Medium
No
No
 - 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 8 more
#VU64503 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23633		 CWE-200 Medium
No
No
 - 20.06.2022 SB2022062023
SB2024062857
SB2024062858
and 5 more
#VU64438 - Use After Free
CVE-2022-1184		 CWE-416 Low
No
No
 - 16.06.2022 SB2022061630
SB2022061631
SB2022061632
and 63 more
#VU64434 - Use After Free
CVE-2022-1652		 CWE-416 Low
No
No
 - 16.06.2022 SB2022061630
SB2022061631
SB2022061632
and 47 more
#VU64156 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-1729		 CWE-362 Low
No
No
 - 10.06.2022 SB2022061213
SB2022061417
SB2022061630
and 79 more
#VU64082 - Use After Free
CVE-2022-1734		 CWE-416 Low
No
No
 - 08.06.2022 SB2022060827
SB2022061630
SB2022061633
and 40 more
#VU63789 - NULL Pointer Dereference
CVE-2022-0168		 CWE-476 Low
No
No
 - 30.05.2022 SB2022060826
SB2022061631
SB2022061632
and 29 more
#VU63388 - Exposure of sensitive information to an unauthorized actor
CVE-2022-1353		 CWE-200 Low
No
No
 - 18.05.2022 SB2022060826
SB2022060828
SB2022061213
and 58 more
#VU63386 - Use After Free
CVE-2022-1011		 CWE-416 Low
Public exploit available
No
 - 18.05.2022 SB2022060828
SB2022061213
SB2022061630
and 53 more
#VU63166 - Out-of-bounds write
CVE-2022-1158		 CWE-787 Medium
No
No
 - 13.05.2022 SB2022051314
SB2022051712
SB2022060824
and 32 more
#VU63158 - NULL Pointer Dereference
CVE-2022-1516		 CWE-476 Low
No
No
 - 13.05.2022 SB2022051313
SB2022051712
SB2022060826
and 31 more
#VU60490 - Improper input validation
CVE-2021-33061		 CWE-20 Low
No
No
 - 10.02.2022 SB2022021004
SB2022061630
SB2022061631
and 31 more
#VU59084 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-20321		 CWE-362 Low
No
No
 - 22.12.2021 SB2021122207
SB2021122216
SB2021122218
and 29 more
#VU54455 - Protection Mechanism Failure
CVE-2020-26541		 CWE-693 Low
No
No
 - 30.06.2021 SB2020100224
SB2021063015
SB2021063016
and 26 more
#VU53004 - Use After Free
CVE-2021-22904		 CWE-416 Medium
No
No
 - 10.05.2021 SB2021051012
SB2021061020
SB2022062023
and 2 more
#VU28418 - Use After Free
CVE-2019-19377		 CWE-416 Low
No
No
 - 29.11.2019 SB2019112914
SB2022061630
SB2022061631
and 14 more


Showing elements 141 - 160 out of 306