Known vulnerabilities in SUSE Linux Enterprise Module for SUSE Manager Server - page 6

Vendor: SUSE
Software: SUSE Linux Enterprise Module for SUSE Manager Server
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_suse_manager_server:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 115
Public exploits: 18
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for SUSE Manager Server SUSE Linux Enterprise Module for SUSE Manager Server is affected by 115 known vulnerabilities: 1 critical, 34 high, 55 medium, 25 low Critical High Medium Low

Vulnerabilities (115)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57215 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-28477		 CWE-94 Medium
No
No
 - 11.10.2021 SB2021011916
SB2022100554
SB2022103128
and 2 more
#VU52578 - Improper input validation
CVE-2017-18640		 CWE-20 Medium
No
No
 - 26.04.2021 SB2021042616
SB2021081922
SB2021060732
and 20 more
#VU50988 - Permissions, Privileges, and Access Controls
CVE-2020-28243		 CWE-264 Medium
Available
No
 - 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50987 - Improper Certificate Validation
CVE-2020-28972		 CWE-295 Medium
No
No
 - 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50986 - Improper Authentication
CVE-2021-3144		 CWE-287 High
No
No
 - 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 28 more
#VU50985 - Improper Certificate Validation
CVE-2020-35662		 CWE-295 Medium
No
No
 - 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50984 - Command injection
CVE-2021-3148		 CWE-77 Medium
No
No
 - 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50983 - Information Exposure Through Log Files
CVE-2021-25284		 CWE-532 Low
No
No
 - 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50982 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-25283		 CWE-94 High
No
No
 - 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50981 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-3197		 CWE-78 High
No
No
 - 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50980 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-25282		 CWE-22 Medium
Available
No
 - 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50979 - Improper Access Control
CVE-2021-25281		 CWE-284 Medium
Available
No
 - 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU49040 - Improper input validation
CVE-2020-26259		 CWE-20 Medium
Available
No
 - 16.12.2020 SB2020121623
SB2021010802
SB2021062144
and 17 more
#VU49041 - Server-Side Request Forgery (SSRF)
CVE-2020-26258		 CWE-918 Medium
Available
No
 - 16.12.2020 SB2020121623
SB2021010802
SB2021062144
and 16 more
#VU49039 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-26217		 CWE-78 Medium
Available
No
 - 16.11.2020 SB2020111622
SB2020121624
SB20210120118
and 14 more


Showing elements 101 - 120 out of 115