Known vulnerabilities in SUSE Linux Enterprise Module for Web Scripting 15-SP2 - page 2

Vendor: SUSE
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_web_scripting:*:*:*:*:*:*:*:*
Total vulnerabilities: 32
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Web Scripting version 15-SP2 SUSE Linux Enterprise Module for Web Scripting 15-SP2 is affected by 32 vulnerabilities: 5 high, 24 medium, 3 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61255 - Incorrect Regular Expression
CVE-2021-23362
CWE-185 Medium
No
No
- 11.03.2022 SB2021032315
SB2022031104
SB2022060315
and 28 more
#VU54624 - Out-of-bounds read
CVE-2021-22918
CWE-125 Medium
No
No
- 08.07.2021 SB2021070819
SB2021072009
SB2021081123
and 40 more
#VU52909 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7774
CWE-94 Medium
No
No
- 06.05.2021 SB2020111735
SB2021050615
SB2021092814
and 24 more
#VU51733 - NULL Pointer Dereference
CVE-2021-3449
CWE-476 Medium
Public exploit available
No
- 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450
CWE-254 Medium
No
No
- 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU52194 - Incorrect Regular Expression
CVE-2021-27290
CWE-185 Medium
No
No
- 12.03.2021 SB2021041364
SB2021070819
SB2021101939
and 32 more
#VU51014 - Resource Management Errors
CVE-2021-25122
CWE-399 Medium
No
No
- 01.03.2021 SB2021030115
SB2021031619
SB2021032519
and 23 more
#VU51012 - Deserialization of Untrusted Data
CVE-2021-25329
CWE-502 Medium
No
No
- 01.03.2021 SB2021030115
SB2021031620
SB2021040723
and 16 more
#VU50955 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-22884
CWE-350 Medium
No
No
- 25.02.2021 SB2021022530
SB2021022532
SB2021022616
and 38 more
#VU50954 - Resource Management Errors
CVE-2021-22883
CWE-399 Medium
No
No
- 25.02.2021 SB2021022530
SB2021022532
SB2021022614
and 36 more
#VU50745 - Improper input validation
CVE-2021-23840
CWE-20 Medium
No
No
- 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU28158 - Deserialization of Untrusted Data
CVE-2020-9484
CWE-502 High
Public exploit available
No
- 21.05.2020 SB2020052124
SB2020052501
SB2020053102
and 47 more


Showing elements 21 - 40 out of 32