Known vulnerabilities in SUSE Linux Enterprise Module for Containers 15-SP3

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Containers
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_containers:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 33
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Containers version 15-SP3 SUSE Linux Enterprise Module for Containers 15-SP3 is affected by 33 vulnerabilities: 2 high, 23 medium, 8 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70039 - Resource exhaustion
CVE-2022-23471		 CWE-400 Medium
No
No
 - 08.12.2022 SB2022120802
SB2022121324
SB2022122112
and 27 more
#VU69291 - Incorrect Authorization
CVE-2022-2990		 CWE-863 Low
No
No
 - 14.11.2022 SB2022111431
SB2022111435
SB2022111439
and 14 more
#VU69290 - Incorrect Authorization
CVE-2022-2989		 CWE-863 Low
No
No
 - 14.11.2022 SB2022111428
SB2022111429
SB2022111430
and 14 more
#VU67945 - Resource exhaustion
CVE-2022-36055		 CWE-400 Medium
No
No
 - 05.10.2022 SB2022100548
SB2022100551
SB2022102004
and 4 more
#VU67071 - Permissions, Privileges, and Access Controls
CVE-2022-1798		 CWE-264 Medium
No
No
 - 07.09.2022 SB2022090764
SB2022091531
SB2022092051
and 4 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996		 CWE-942 Low
No
No
 - 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU64805 - Improper input validation
CVE-2021-43565		 CWE-20 Medium
No
No
 - 29.06.2022 SB2021120347
SB2022062928
SB2022072127
and 39 more
#VU64008 - Resource exhaustion
CVE-2022-1708		 CWE-400 Medium
No
No
 - 07.06.2022 SB2022060707
SB2022061334
SB2022061627
and 15 more
#VU64007 - Resource exhaustion
CVE-2022-31030		 CWE-400 Medium
No
No
 - 07.06.2022 SB2022060702
SB2022061206
SB2022061326
and 23 more
#VU63090 - Permissions, Privileges, and Access Controls
CVE-2022-29162		 CWE-264 Medium
No
No
 - 12.05.2022 SB2022051205
SB2022062435
SB2022071158
and 32 more
#VU62468 - Permissions, Privileges, and Access Controls
CVE-2022-1227		 CWE-264 Medium
Public exploit available
No
 - 21.04.2022 SB2022042124
SB2022051166
SB2022051217
and 14 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191		 CWE-327 Medium
No
No
 - 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU61797 - Incorrect Default Permissions
CVE-2022-27651		 CWE-276 Medium
No
No
 - 01.04.2022 SB2022040108
SB2022040807
SB2022042012
and 14 more
#VU61600 - Permissions, Privileges, and Access Controls
CVE-2022-24769		 CWE-264 Medium
No
No
 - 24.03.2022 SB2022032414
SB2022032503
SB2022042141
and 29 more
#VU61599 - Improper input validation
CVE-2022-21698		 CWE-20 Medium
No
No
 - 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU60972 - Permissions, Privileges, and Access Controls
CVE-2022-23648		 CWE-264 Medium
Public exploit available
No
 - 03.03.2022 SB2022030305
SB2022030722
SB2022030725
and 30 more
#VU55590 - Improper Protection of Alternate Path
CVE-2021-20206		 CWE-424 Medium
No
No
 - 05.08.2021 SB2021032636
SB2021080502
SB2022021637
and 19 more
#VU48696 - Out-of-bounds read
CVE-2020-29130		 CWE-125 Medium
No
No
 - 27.11.2020 SB2020112716
SB2020120311
SB2020120506
and 8 more
#VU26643 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-10696		 CWE-22 High
No
No
 - 07.04.2020 SB2020040723
SB2020042905
SB2020043013
and 12 more
#VU30626 - Improper Link Resolution Before File Access ('Link Following')
CVE-2019-18658		 CWE-59 High
No
No
 - 12.11.2019 SB2019111225
SB2022053137


Showing elements 1 - 20 out of 33