Known vulnerabilities in SUSE Linux Enterprise Module for Containers 15-SP4

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Containers
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_containers:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 27
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Containers version 15-SP4 SUSE Linux Enterprise Module for Containers 15-SP4 is affected by 27 vulnerabilities: 3 high, 19 medium, 5 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70623 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-21272		 CWE-59 Medium
No
No
 - 03.01.2023 SB2021012530
SB2023010307
#VU70620 - Improper input validation
CVE-2022-23524		 CWE-20 Medium
No
No
 - 03.01.2023 SB2023010306
SB2023010307
SB2023041126
and 7 more
#VU70619 - Improper input validation
CVE-2022-23525		 CWE-20 Medium
No
No
 - 03.01.2023 SB2023010306
SB2023010307
SB2023041126
and 5 more
#VU70618 - Improper input validation
CVE-2022-23526		 CWE-20 Medium
No
No
 - 03.01.2023 SB2023010306
SB2023010307
SB2023041126
and 9 more
#VU70039 - Resource exhaustion
CVE-2022-23471		 CWE-400 Medium
No
No
 - 08.12.2022 SB2022120802
SB2022121324
SB2022122112
and 27 more
#VU69291 - Incorrect Authorization
CVE-2022-2990		 CWE-863 Low
No
No
 - 14.11.2022 SB2022111431
SB2022111435
SB2022111439
and 14 more
#VU69290 - Incorrect Authorization
CVE-2022-2989		 CWE-863 Low
No
No
 - 14.11.2022 SB2022111428
SB2022111429
SB2022111430
and 14 more
#VU67945 - Resource exhaustion
CVE-2022-36055		 CWE-400 Medium
No
No
 - 05.10.2022 SB2022100548
SB2022100551
SB2022102004
and 4 more
#VU67071 - Permissions, Privileges, and Access Controls
CVE-2022-1798		 CWE-264 Medium
No
No
 - 07.09.2022 SB2022090764
SB2022091531
SB2022092051
and 4 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996		 CWE-942 Low
No
No
 - 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU64008 - Resource exhaustion
CVE-2022-1708		 CWE-400 Medium
No
No
 - 07.06.2022 SB2022060707
SB2022061334
SB2022061627
and 15 more
#VU63090 - Permissions, Privileges, and Access Controls
CVE-2022-29162		 CWE-264 Medium
No
No
 - 12.05.2022 SB2022051205
SB2022062435
SB2022071158
and 32 more
#VU62468 - Permissions, Privileges, and Access Controls
CVE-2022-1227		 CWE-264 Medium
Public exploit available
No
 - 21.04.2022 SB2022042124
SB2022051166
SB2022051217
and 14 more
#VU61829 - Permissions, Privileges, and Access Controls
CVE-2022-27649		 CWE-264 Medium
No
No
 - 04.04.2022 SB2022040410
SB2022042012
SB2022042725
and 14 more
#VU61599 - Improper input validation
CVE-2022-21698		 CWE-20 Medium
No
No
 - 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU58668 - Exposure of sensitive information to an unauthorized actor
CVE-2021-4024		 CWE-200 Low
No
No
 - 08.12.2021 SB2021120807
SB2022111597
SB2023012731
and 7 more
#VU58229 - Type confusion
CVE-2021-41190		 CWE-843 Low
No
No
 - 18.11.2021 SB2021111806
SB2021111807
SB2021111809
and 39 more
#VU55590 - Improper Protection of Alternate Path
CVE-2021-20206		 CWE-424 Medium
No
No
 - 05.08.2021 SB2021032636
SB2021080502
SB2022021637
and 19 more
#VU50275 - Origin Validation Error
CVE-2021-20199		 CWE-346 High
No
No
 - 02.02.2021 SB2021020306
SB2022092037
SB2022111597
and 3 more
#VU26643 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-10696		 CWE-22 High
No
No
 - 07.04.2020 SB2020040723
SB2020042905
SB2020043013
and 12 more


Showing elements 1 - 20 out of 27