Known vulnerabilities in SUSE Linux Enterprise Module for Server Applications

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Server Applications
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 334
Public exploits: 18
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Server Applications SUSE Linux Enterprise Module for Server Applications is affected by 334 known vulnerabilities: 2 critical, 43 high, 153 medium, 136 low Critical High Medium Low

Vulnerabilities (334)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72086 - Memory corruption
CVE-2023-24021		 CWE-119 High
No
No
 - 09.02.2023 SB2023020947
SB2023021587
SB2023021740
and 7 more
#VU72085 - Improper input validation
CVE-2022-48279		 CWE-20 Medium
No
No
 - 09.02.2023 SB2023020946
SB2023020948
SB2023020949
and 15 more
#VU71754 - Integer overflow
CVE-2022-25147		 CWE-190 High
No
No
 - 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 47 more
#VU71703 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-39191		 CWE-601 Low
No
No
 - 31.01.2023 SB2021090324
SB2023013118
SB2023081884
and 6 more
#VU71531 - Reachable Assertion
CVE-2022-3924		 CWE-617 Medium
No
No
 - 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 19 more
#VU71530 - Improper input validation
CVE-2022-3736		 CWE-20 Medium
No
No
 - 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 18 more
#VU71529 - Resource exhaustion
CVE-2022-3094		 CWE-400 Medium
No
No
 - 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 47 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760		 CWE-444 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001		 CWE-119 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more
#VU71193 - Integer overflow
CVE-2023-22458		 CWE-190 Medium
No
No
 - 16.01.2023 SB2023011657
SB2023020740
SB2023053119
and 8 more
#VU71192 - Integer overflow
CVE-2022-35977		 CWE-190 Medium
No
No
 - 16.01.2023 SB2023011657
SB2023020661
SB2023020740
and 17 more
#VU70668 - Incorrect Default Permissions
CVE-2022-31254		 CWE-276 Low
No
No
 - 04.01.2023 SB2023010404
SB2023010405
SB2023010406
and 3 more
#VU70505 - NULL Pointer Dereference
CVE-2022-41860		 CWE-476 Medium
No
No
 - 27.12.2022 SB2022122727
SB2022122728
SB2022122729
and 14 more
#VU70504 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41859		 CWE-200 Low
No
No
 - 27.12.2022 SB2022122727
SB2022122728
SB2022122729
and 14 more
#VU70325 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-23527		 CWE-601 Low
No
No
 - 14.12.2022 SB2022121429
SB2023013118
SB2023081884
and 9 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946		 CWE-276 Low
No
No
 - 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU69153 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23824		 CWE-200 Medium
No
No
 - 09.11.2022 SB2022110914
SB2023012540
SB2023012654
and 9 more
#VU68495 - Out-of-bounds read
CVE-2022-41742		 CWE-125 Medium
No
No
 - 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 34 more
#VU68494 - Out-of-bounds read
CVE-2022-41741		 CWE-125 Medium
No
No
 - 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 32 more


Showing elements 1 - 20 out of 334