Known vulnerabilities in SUSE Linux Enterprise Module for SUSE Manager Server

Vendor: SUSE
Software: SUSE Linux Enterprise Module for SUSE Manager Server
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_suse_manager_server:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 115
Public exploits: 18
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for SUSE Manager Server SUSE Linux Enterprise Module for SUSE Manager Server is affected by 115 known vulnerabilities: 1 critical, 34 high, 55 medium, 25 low Critical High Medium Low

Vulnerabilities (115)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72126 - Deserialization of Untrusted Data
CVE-2022-1415		 CWE-502 High
No
No
 - 11.02.2023 SB2023021104
SB2023021106
SB2023021108
and 3 more
#VU71261 - Improper input validation
CVE-2022-1941		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011780
SB2023011801
SB2023011802
and 24 more
#VU70599 - Permissions, Privileges, and Access Controls
CVE-2022-45153		 CWE-264 Low
No
No
 - 02.01.2023 SB2023010236
SB2023010237
SB2023010238
#VU69545 - Incorrect Default Permissions
CVE-2022-41946		 CWE-276 Low
No
No
 - 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 - 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU69064 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43754		 CWE-79 Low
No
No
 - 07.11.2022 SB2022110737
SB2022110739
SB2022110740
and 1 more
#VU69063 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-43753		 CWE-22 Medium
Available
No
 - 07.11.2022 SB2022110737
SB2022110739
SB2022110740
and 1 more
#VU69062 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31255		 CWE-22 Medium
Available
No
 - 07.11.2022 SB2022110737
SB2022110739
SB2022110740
and 1 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 - 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197		 CWE-89 High
No
No
 - 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more
#VU65759 - Out-of-bounds read
CVE-2022-2469		 CWE-125 Low
No
No
 - 25.07.2022 SB2022072519
SB2022072531
SB2022101129
and 17 more
#VU65354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31097		 CWE-79 Low
No
No
 - 15.07.2022 SB2022071510
SB2022102094
SB2022102641
and 16 more
#VU65353 - Improper Authentication
CVE-2022-31107		 CWE-287 High
No
No
 - 15.07.2022 SB2022071510
SB2022072642
SB2022072643
and 21 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 - 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU63127 - Resource exhaustion
CVE-2021-37136		 CWE-400 Medium
No
No
 - 12.05.2022 SB2021101948
SB2022051235
SB2022060838
and 36 more
#VU60181 - Resource Management Errors
CVE-2021-22569		 CWE-399 Medium
Available
No
 - 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 - 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 43 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 - 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU27513 - Resource exhaustion
CVE-2020-11612		 CWE-400 Medium
No
No
 - 04.05.2020 SB2020050435
SB2020073033
SB2021012210
and 35 more


Showing elements 1 - 20 out of 115