Known vulnerabilities in SUSE Linux Enterprise Module for Web Scripting

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Web Scripting
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_web_scripting:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 96
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Web Scripting SUSE Linux Enterprise Module for Web Scripting is affected by 96 known vulnerabilities: 13 high, 68 medium, 15 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71137 - Incorrect Regular Expression
CVE-2022-40899		 CWE-185 Medium
No
No
 - 12.01.2023 SB2023011234
SB2023011239
SB2023011240
and 26 more
#VU70788 - Integer overflow
CVE-2022-31631		 CWE-190 Medium
No
No
 - 07.01.2023 SB2023010702
SB2023010704
SB2023011201
and 21 more
#VU69392 - Resource exhaustion
CVE-2022-45061		 CWE-400 Medium
No
No
 - 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548		 CWE-350 Medium
No
No
 - 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU68855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39348		 CWE-79 Low
No
No
 - 31.10.2022 SB2022103137
SB20221115106
SB2022111743
and 12 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256		 CWE-444 Medium
No
No
 - 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU67849 - Use of Insufficiently Random Values
CVE-2022-35255		 CWE-330 Medium
No
No
 - 03.10.2022 SB2022100401
SB2022100402
SB2022100528
and 40 more
#VU67760 - Type conversion
CVE-2020-10735		 CWE-704 Medium
No
No
 - 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215		 CWE-444 Medium
No
No
 - 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32214		 CWE-444 Medium
No
No
 - 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 36 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213		 CWE-444 Medium
No
No
 - 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU65273 - Improper Check or Handling of Exceptional Conditions
CVE-2022-32212		 CWE-703 Medium
No
No
 - 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 48 more
#VU49338 - Improper input validation
CVE-2020-7071		 CWE-20 Medium
No
No
 - 07.01.2021 SB2021010720
SB2021010722
SB2021010903
and 17 more
#VU47253 - Cryptographic Issues
CVE-2020-7069		 CWE-310 Low
No
No
 - 02.10.2020 SB2020100201
SB2020100220
SB2020102043
and 16 more
#VU47252 - Improper input validation
CVE-2020-7070		 CWE-20 Medium
No
No
 - 02.10.2020 SB2020100201
SB2020100221
SB2020102043
and 16 more
#VU34121 - Use After Free
CVE-2020-7068		 CWE-416 Medium
No
No
 - 07.08.2020 SB2020080711
SB2020090106
SB2020090721
and 15 more
#VU26355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10108		 CWE-444 Medium
No
No
 - 24.03.2020 SB2020031234
SB2020032419
SB2020043012
and 11 more
#VU31043 - Improper input validation
CVE-2019-12387		 CWE-20 Medium
No
No
 - 10.06.2019 SB2019061006
SB2019072125
SB2019072129
and 4 more
#VU16112 - Permissions, Privileges, and Access Controls
CVE-2015-3411		 CWE-264 Low
No
No
 - 27.11.2018 SB2015070601
SB2015071705
SB2023011201
#VU31834 - Out-of-bounds read
CVE-2014-9709		 CWE-125 Medium
No
No
 - 30.03.2015 SB2015033001
SB2015051316
SB2015041703
and 3 more


Showing elements 1 - 20 out of 96