Known vulnerabilities in SUSE Linux Enterprise Module for Server Applications 15-SP2

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Server Applications
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 114
Public exploits: 14
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Server Applications version 15-SP2 SUSE Linux Enterprise Module for Server Applications 15-SP2 is affected by 114 vulnerabilities: 2 critical, 18 high, 65 medium, 29 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59057 - Server-Side Request Forgery (SSRF)
CVE-2021-44224		 CWE-918 Medium
No
No
 - 20.12.2021 SB2021122005
SB2021122021
SB2021122709
and 33 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Public exploit available
No
 - 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU58477 - Heap-based Buffer Overflow
CVE-2021-43527		 CWE-122 High
No
No
 - 01.12.2021 SB2021120123
SB2021120124
SB2021120201
and 66 more
#VU58352 - Improper input validation
CVE-2021-28709		 CWE-20 Medium
No
No
 - 24.11.2021 SB2021112410
SB2021120620
SB2022011910
and 8 more
#VU58351 - Improper input validation
CVE-2021-28705		 CWE-20 Medium
No
No
 - 24.11.2021 SB2021112410
SB2021120620
SB2022011910
and 8 more
#VU58346 - Improper input validation
CVE-2021-28708		 CWE-20 Medium
No
No
 - 24.11.2021 SB2021112409
SB2021120620
SB2021112921
and 7 more
#VU58345 - Improper input validation
CVE-2021-28707		 CWE-20 Medium
No
No
 - 24.11.2021 SB2021112409
SB2021120620
SB2021112921
and 7 more
#VU58344 - Improper input validation
CVE-2021-28704		 CWE-20 Medium
No
No
 - 24.11.2021 SB2021112409
SB2021120620
SB2021112921
and 7 more
#VU58342 - Memory corruption
CVE-2021-28706		 CWE-119 Medium
No
No
 - 24.11.2021 SB2021112407
SB2021120620
SB2022011910
and 8 more
#VU58114 - Missing Encryption of Sensitive Data
CVE-2021-23222		 CWE-311 Medium
No
No
 - 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 29 more
#VU58113 - Missing Encryption of Sensitive Data
CVE-2021-23214		 CWE-311 Medium
No
No
 - 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 34 more
#VU57752 - Resource exhaustion
CVE-2021-25219		 CWE-400 Medium
No
No
 - 28.10.2021 SB2021102801
SB2021102903
SB2021110111
and 33 more
#VU57511 - Improper input validation
CVE-2021-35604		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101944
SB2022032018
SB2022060129
and 32 more
#VU57097 - Use After Free
CVE-2021-28702		 CWE-416 Medium
No
No
 - 06.10.2021 SB2021100612
SB2021120134
SB2021120339
and 4 more
#VU57036 - Heap-based Buffer Overflow
CVE-2021-32626		 CWE-122 Medium
No
No
 - 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 24 more
#VU57035 - Out-of-bounds read
CVE-2021-32672		 CWE-125 Low
No
No
 - 04.10.2021 SB2021100404
SB2021102109
SB2021102116
and 10 more
#VU57034 - Improper input validation
CVE-2021-32675		 CWE-20 Medium
No
No
 - 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 24 more
#VU57031 - Integer overflow
CVE-2021-32687		 CWE-190 Medium
No
No
 - 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 22 more
#VU57032 - Integer overflow
CVE-2021-32628		 CWE-190 High
No
No
 - 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 22 more
#VU57033 - Integer overflow
CVE-2021-32627		 CWE-190 High
No
No
 - 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 22 more


Showing elements 1 - 20 out of 114