Known vulnerabilities in SUSE Linux Enterprise High Availability 15-SP4 - page 9

Vendor: SUSE
Software: SUSE Linux Enterprise High Availability
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_high_availability:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 317
Public exploits: 18
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise High Availability version 15-SP4 SUSE Linux Enterprise High Availability 15-SP4 is affected by 317 vulnerabilities: 13 high, 50 medium, 254 low Critical High Medium Low

Vulnerabilities (317)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86247 - Out-of-bounds read
CVE-2021-4204		 CWE-125 Low
Public exploit available
No
 - 08.02.2024 SB2022082447
SB2024020815
SB2024021538
and 17 more
#VU68860 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31163		 CWE-22 Medium
No
No
 - 31.10.2022 SB2022103147
SB2022103161
SB2022072942
and 6 more
#VU90364 - Out-of-bounds read
CVE-2022-1508		 CWE-125 Low
No
No
 - 31.08.2022 SB2022083141
SB2022072146
SB2022080171
and 1 more
#VU66476 - Improper input validation
CVE-2022-36946		 CWE-20 Medium
Public exploit available
No
 - 13.08.2022 SB2022081305
SB2022081647
SB2022081739
and 73 more
#VU65903 - Permissions, Privileges, and Access Controls
CVE-2022-2553		 CWE-264 Low
No
No
 - 01.08.2022 SB2022080105
SB2022080113
SB2022080114
and 12 more
#VU65824 - Missing release of memory after effective lifetime
CVE-2022-32742		 CWE-401 Low
No
No
 - 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 36 more
#VU64438 - Use After Free
CVE-2022-1184		 CWE-416 Low
No
No
 - 16.06.2022 SB2022061630
SB2022061631
SB2022061632
and 63 more
#VU64434 - Use After Free
CVE-2022-1652		 CWE-416 Low
No
No
 - 16.06.2022 SB2022061630
SB2022061631
SB2022061632
and 47 more
#VU64259 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0494		 CWE-200 Low
No
No
 - 14.06.2022 SB2022061417
SB2022042152
SB2022070733
and 40 more
#VU64156 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-1729		 CWE-362 Low
No
No
 - 10.06.2022 SB2022061213
SB2022061417
SB2022061630
and 79 more
#VU64079 - Missing release of memory after effective lifetime
CVE-2022-1012		 CWE-401 Medium
No
No
 - 08.06.2022 SB2022060827
SB2022061417
SB2022062437
and 75 more
#VU64077 - NULL Pointer Dereference
CVE-2022-1671		 CWE-476 Low
No
No
 - 08.06.2022 SB2022060826
SB2022072146
SB2022080171
#VU64076 - Missing release of memory after effective lifetime
CVE-2022-1651		 CWE-401 Low
No
No
 - 08.06.2022 SB2022060826
SB2022072146
SB2022080171
#VU63570 - Improper Handling of Exceptional Conditions
CVE-2022-0264		 CWE-755 Low
No
No
 - 24.05.2022 SB2022032233
SB2022040721
SB2022072146
and 2 more
#VU63567 - Out-of-bounds read
CVE-2021-45402		 CWE-125 Low
No
No
 - 24.05.2022 SB2022032233
SB2022040721
SB2022033024
and 4 more
#VU63433 - NULL Pointer Dereference
CVE-2022-1205		 CWE-476 Low
No
No
 - 19.05.2022 SB2022060826
SB2022060827
SB2022070743
and 19 more
#VU63431 - Use After Free
CVE-2022-1198		 CWE-416 Low
No
No
 - 19.05.2022 SB2022060826
SB2022060828
SB2022070743
and 14 more
#VU62483 - NULL Pointer Dereference
CVE-2021-44879		 CWE-476 Low
No
No
 - 21.04.2022 SB2022042145
SB2022042149
SB2022022234
and 16 more
#VU61210 - NULL Pointer Dereference
CVE-2022-0617		 CWE-476 Low
No
No
 - 09.03.2022 SB2022030910
SB2022031106
SB2022031401
and 27 more
#VU60490 - Improper input validation
CVE-2021-33061		 CWE-20 Low
No
No
 - 10.02.2022 SB2022021004
SB2022061630
SB2022061631
and 31 more


Showing elements 161 - 180 out of 317