Known vulnerabilities in SUSE Linux Enterprise Module for Server Applications 15-SP2 - page 3

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Server Applications
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 114
Public exploits: 14
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Server Applications version 15-SP2 SUSE Linux Enterprise Module for Server Applications 15-SP2 is affected by 114 vulnerabilities: 2 critical, 18 high, 65 medium, 29 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62735 - Incorrect Permission Assignment for Critical Resource
CVE-2021-3631		 CWE-732 Medium
No
No
 - 03.05.2022 SB2022050302
SB2022050308
SB2021072782
and 6 more
#VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33193		 CWE-444 Medium
No
No
 - 13.09.2021 SB2021091317
SB2021091707
SB2021092301
and 24 more
#VU55334 - Improper Authentication
CVE-2021-3652		 CWE-287 Medium
No
No
 - 27.07.2021 SB2021072715
SB2021072716
SB2021081121
and 11 more
#VU55291 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32792		 CWE-79 Low
No
No
 - 26.07.2021 SB2021072603
SB2023081884
SB2022051064
and 6 more
#VU55287 - NULL Pointer Dereference
CVE-2021-36222		 CWE-476 Medium
No
No
 - 25.07.2021 SB2021072501
SB2021072502
SB2021080601
and 24 more
#VU55091 - Improper input validation
CVE-2021-2372		 CWE-20 Low
No
No
 - 20.07.2021 SB2021072058
SB2021092222
SB2021101334
and 28 more
#VU55062 - Improper input validation
CVE-2021-2389		 CWE-20 Medium
No
No
 - 20.07.2021 SB2021072058
SB2021092222
SB2021101334
and 23 more
#VU54573 - Memory corruption
CVE-2021-3570		 CWE-119 High
No
No
 - 06.07.2021 SB2021070615
SB2021070617
SB2021070618
and 15 more
#VU54286 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-33515		 CWE-74 Medium
No
No
 - 21.06.2021 SB2021062107
SB2021062223
SB2021071801
and 12 more
#VU54285 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29157		 CWE-22 Low
No
No
 - 21.06.2021 SB2021062107
SB2021062223
SB2021071801
and 9 more
#VU54284 - Resource Management Errors
CVE-2020-28200		 CWE-399 Medium
No
No
 - 21.06.2021 SB2021062107
SB2021062222
SB2021083139
and 5 more
#VU53726 - Integer overflow
CVE-2021-32625		 CWE-190 High
No
No
 - 01.06.2021 SB2021060145
SB2021060146
SB2021071223
and 3 more
#VU53681 - Out-of-bounds write
CVE-2021-3546		 CWE-787 Medium
No
No
 - 31.05.2021 SB2021053119
SB2021063043
SB2021063044
and 3 more
#VU53680 - Exposure of sensitive information to an unauthorized actor
CVE-2021-3545		 CWE-200 Low
No
No
 - 31.05.2021 SB2021053119
SB2021063043
SB2021063044
and 3 more
#VU53679 - Missing release of memory after effective lifetime
CVE-2021-3544		 CWE-401 Medium
No
No
 - 31.05.2021 SB2021053119
SB2021063043
SB2021063044
and 3 more
#VU52395 - Improper input validation
CVE-2021-2154		 CWE-20 Medium
No
No
 - 21.04.2021 SB2021042109
SB2021051922
SB2021052615
and 27 more
#VU52396 - Improper input validation
CVE-2021-2166		 CWE-20 Medium
No
No
 - 21.04.2021 SB2021042109
SB2021051922
SB2021052615
and 37 more
#VU51645 - Command injection
CVE-2021-27928		 CWE-77 High
Public exploit available
No
 - 23.03.2021 SB2021032310
SB2021042124
SB2021042125
and 11 more
#VU49237 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24386		 CWE-200 Medium
No
No
 - 04.01.2021 SB2021010411
SB2021010412
SB2021010418
and 11 more
#VU45671 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-12100		 CWE-835 Medium
No
No
 - 13.08.2020 SB2020081309
SB2020081310
SB2020081917
and 16 more


Showing elements 41 - 60 out of 114