Known vulnerabilities in SUSE Linux Enterprise Module for Public Cloud 12

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Public Cloud
Version: 12
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_public_cloud:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 20
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Public Cloud version 12 SUSE Linux Enterprise Module for Public Cloud 12 is affected by 20 vulnerabilities: 2 high, 15 medium, 3 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71642 - Incorrect Regular Expression
CVE-2022-42969		 CWE-185 Medium
No
No
 - 30.01.2023 SB2023013033
SB2023013037
SB2023021338
and 11 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 - 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU71377 - Improper input validation
CVE-2022-40898		 CWE-20 Medium
No
No
 - 20.01.2023 SB2023012007
SB2023012013
SB2023012014
and 22 more
#VU71137 - Incorrect Regular Expression
CVE-2022-40899		 CWE-185 Medium
No
No
 - 12.01.2023 SB2023011234
SB2023011239
SB2023011240
and 26 more
#VU66467 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-42771		 CWE-22 Medium
No
No
 - 12.08.2022 SB20211214110
SB2022081226
SB2022083038
and 18 more
#VU66201 - Security Features
CVE-2022-2255		 CWE-254 Medium
No
No
 - 09.08.2022 SB2022080904
SB2022080914
SB2022111643
and 6 more
#VU65771 - Information Exposure Through Timing Discrepancy
CVE-2020-25657		 CWE-208 Medium
No
No
 - 26.07.2022 SB2021011288
SB2022072601
SB2022072602
and 7 more
#VU63168 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-29217		 CWE-327 Medium
No
No
 - 13.05.2022 SB2022051319
SB2022071428
SB2022071429
and 12 more
#VU62512 - Improper input validation
CVE-2021-3572		 CWE-20 Medium
No
No
 - 22.04.2022 SB2022042257
SB2022042259
SB2021071390
and 51 more
#VU61662 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-24302		 CWE-362 Low
No
No
 - 28.03.2022 SB2022032832
SB2022032837
SB2022033014
and 20 more
#VU54520 - Improper input validation
CVE-2020-14343		 CWE-20 High
Public exploit available
No
 - 04.07.2021 SB2021070403
SB2021070404
SB2022042259
and 17 more
#VU51777 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-28957		 CWE-79 Low
No
No
 - 30.03.2021 SB2021033001
SB2021033005
SB2021040175
and 20 more
#VU51776 - Resource Management Errors
CVE-2021-27291		 CWE-399 Medium
No
No
 - 30.03.2021 SB2021031407
SB2021033004
SB2021041202
and 17 more
#VU50989 - Resource exhaustion
CVE-2021-21240		 CWE-400 Medium
No
No
 - 28.02.2021 SB2021022811
SB2021022814
SB2021051932
and 6 more
#VU48793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-27783		 CWE-79 Medium
No
No
 - 03.12.2020 SB2020120602
SB2020120603
SB2020121305
and 20 more
#VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26137		 CWE-93 Medium
No
No
 - 30.09.2020 SB2020100716
SB2020121420
SB2021052028
and 35 more
#VU28793 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-13757		 CWE-327 Medium
No
No
 - 08.06.2020 SB2020060820
SB2020081913
SB2020090110
and 11 more
#VU28245 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-11078		 CWE-93 Low
No
No
 - 26.05.2020 SB2020052606
SB2020090111
SB2020110521
and 15 more
#VU25823 - Improper input validation
CVE-2020-1747		 CWE-20 High
No
No
 - 09.03.2020 SB2020030903
SB2020041201
SB2020051129
and 21 more
#VU30827 - Insufficient Entropy
CVE-2019-14806		 CWE-331 Medium
No
No
 - 09.08.2019 SB2019080917
SB2019091736
SB2019091156
and 4 more