Known vulnerabilities in SUSE Linux Enterprise Module for Web Scripting 15-SP3

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Web Scripting
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_web_scripting:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 66
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Web Scripting version 15-SP3 SUSE Linux Enterprise Module for Web Scripting 15-SP3 is affected by 66 vulnerabilities: 10 high, 49 medium, 7 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548		 CWE-350 Medium
No
No
 - 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU68887 - Integer overflow
CVE-2022-37454		 CWE-190 High
Public exploit available
No
 - 01.11.2022 SB2022110118
SB2022110119
SB2022110209
and 69 more
#VU68886 - Out-of-bounds read
CVE-2022-31630		 CWE-125 Medium
No
No
 - 01.11.2022 SB2022110119
SB2022110336
SB2022110814
and 21 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256		 CWE-444 Medium
No
No
 - 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU67849 - Use of Insufficiently Random Values
CVE-2022-35255		 CWE-330 Medium
No
No
 - 03.10.2022 SB2022100401
SB2022100402
SB2022100528
and 40 more
#VU67756 - Security Features
CVE-2022-31629		 CWE-254 Low
Public exploit available
No
 - 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 49 more
#VU67755 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-31628		 CWE-835 Medium
No
No
 - 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 26 more
#VU67166 - Server-Side Request Forgery (SSRF)
CVE-2022-35949		 CWE-918 Medium
No
No
 - 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 4 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-35948		 CWE-93 Medium
No
No
 - 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 4 more
#VU67163 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-31150		 CWE-93 Medium
No
No
 - 11.09.2022 SB2022091108
SB2022091110
SB2022091217
and 2 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215		 CWE-444 Medium
No
No
 - 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213		 CWE-444 Medium
No
No
 - 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU64232 - Use of Uninitialized Resource
CVE-2022-31625		 CWE-908 High
No
No
 - 14.06.2022 SB2022061403
SB2022061404
SB2022061529
and 23 more
#VU64231 - Memory corruption
CVE-2022-31626		 CWE-119 High
Public exploit available
No
 - 14.06.2022 SB2022061403
SB2022061404
SB2022061529
and 25 more
#VU56905 - Absolute Path Traversal
CVE-2021-21706		 CWE-36 Medium
No
No
 - 29.09.2021 SB2021092901
SB2021093001
SB2022111831
and 1 more
#VU50403 - NULL Pointer Dereference
CVE-2021-21702		 CWE-476 Medium
No
No
 - 07.02.2021 SB2021020704
SB2021020705
SB2021020707
and 19 more
#VU49338 - Improper input validation
CVE-2020-7071		 CWE-20 Medium
No
No
 - 07.01.2021 SB2021010720
SB2021010722
SB2021010903
and 17 more
#VU47253 - Cryptographic Issues
CVE-2020-7069		 CWE-310 Low
No
No
 - 02.10.2020 SB2020100201
SB2020100220
SB2020102043
and 16 more
#VU47252 - Improper input validation
CVE-2020-7070		 CWE-20 Medium
No
No
 - 02.10.2020 SB2020100201
SB2020100221
SB2020102043
and 16 more
#VU34121 - Use After Free
CVE-2020-7068		 CWE-416 Medium
No
No
 - 07.08.2020 SB2020080711
SB2020090106
SB2020090721
and 15 more


Showing elements 1 - 20 out of 66