Known vulnerabilities in SUSE Linux Enterprise Module for Basesystem 15-SP2

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Basesystem
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 430
Public exploits: 27
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Basesystem version 15-SP2 SUSE Linux Enterprise Module for Basesystem 15-SP2 is affected by 430 vulnerabilities: 7 critical, 57 high, 182 medium, 184 low Critical High Medium Low

Vulnerabilities (430)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66467 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-42771		 CWE-22 Medium
No
No
 - 12.08.2022 SB20211214110
SB2022081226
SB2022083038
and 18 more
#VU63553 - Integer overflow
CVE-2021-43618		 CWE-190 Medium
No
No
 - 24.05.2022 SB2021121654
SB2022052401
SB2021120223
and 85 more
#VU62512 - Improper input validation
CVE-2021-3572		 CWE-20 Medium
No
No
 - 22.04.2022 SB2022042257
SB2022042259
SB2021071390
and 51 more
#VU60098 - Improper input validation
CVE-2021-3426		 CWE-20 Medium
No
No
 - 27.01.2022 SB2022012753
SB2022032905
SB2022032907
and 34 more
#VU59089 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3737		 CWE-835 Low
No
No
 - 22.12.2021 SB2021122214
SB2022050235
SB2022051138
and 58 more
#VU59057 - Server-Side Request Forgery (SSRF)
CVE-2021-44224		 CWE-918 Medium
No
No
 - 20.12.2021 SB2021122005
SB2021122021
SB2021122709
and 33 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Public exploit available
No
 - 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU59045 - Out-of-bounds write
CVE-2021-4008		 CWE-787 Low
No
No
 - 17.12.2021 SB2021121702
SB2021121703
SB2021122215
and 22 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 - 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU58295 - Resource Management Errors
CVE-2021-3733		 CWE-399 Low
No
No
 - 23.11.2021 SB2021112309
SB2021122214
SB2022050235
and 41 more
#VU58215 - Improper input validation
CVE-2021-39920		 CWE-20 Medium
No
No
 - 17.11.2021 SB2021111737
SB2021121102
SB2022011821
and 5 more
#VU58214 - Improper input validation
CVE-2021-39921		 CWE-20 Medium
No
No
 - 17.11.2021 SB2021111737
SB2021121102
SB2022011821
and 5 more
#VU58114 - Missing Encryption of Sensitive Data
CVE-2021-23222		 CWE-311 Medium
No
No
 - 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 29 more
#VU58113 - Missing Encryption of Sensitive Data
CVE-2021-23214		 CWE-311 Medium
No
No
 - 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 34 more
#VU57578 - Inadequate Encryption Strength
CVE-2021-39272		 CWE-326 Low
No
No
 - 21.10.2021 SB2021102120
SB2022051157
SB2021102027
and 8 more
#VU55426 - Improper Initialization
CVE-2021-36386		 CWE-665 Low
No
No
 - 29.07.2021 SB2021072910
SB2022051157
SB2021081839
and 8 more
#VU48944 - Memory corruption
CVE-2020-29361		 CWE-119 Medium
No
No
 - 14.12.2020 SB2020121401
SB2020121402
SB2020121422
and 22 more
#VU46905 - Buffer overflow
CVE-2020-8927		 CWE-120 Medium
No
No
 - 15.09.2020 SB2020092215
SB2020092701
SB2020092704
and 40 more
#VU29491 - Improper Validation of Certificate with Host Mismatch
CVE-2020-13645		 CWE-297 Medium
No
No
 - 03.07.2020 SB2020052813
SB2020052814
SB2020072731
and 7 more
#VU25646 - Inadequate Encryption Strength
CVE-2019-15126		 CWE-326 Low
Public exploit available
No
 - 27.02.2020 SB2020022705
SB2020081258
SB2021121353
and 3 more


Showing elements 1 - 20 out of 430