Known vulnerabilities in SUSE Linux Enterprise Module for Web Scripting - page 5

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_web_scripting:*:*:*:*:*:*:*:*
Total vulnerabilities: 96
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Web Scripting SUSE Linux Enterprise Module for Web Scripting is affected by 96 known vulnerabilities: 13 high, 68 medium, 15 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61255 - Incorrect Regular Expression
CVE-2021-23362
CWE-185 Medium
No
No
- 11.03.2022 SB2021032315
SB2022031104
SB2022060315
and 28 more
#VU54624 - Out-of-bounds read
CVE-2021-22918
CWE-125 Medium
No
No
- 08.07.2021 SB2021070819
SB2021072009
SB2021081123
and 40 more
#VU54566 - Stack-based buffer overflow
CVE-2021-21704
CWE-121 High
No
No
- 06.07.2021 SB2021070611
SB2021070612
SB2021070613
and 17 more
#VU54565 - Server-Side Request Forgery (SSRF)
CVE-2021-21705
CWE-918 Medium
No
No
- 06.07.2021 SB2021070611
SB2021070612
SB2021070613
and 21 more
#VU52909 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7774
CWE-94 Medium
No
No
- 06.05.2021 SB2020111735
SB2021050615
SB2021092814
and 24 more
#VU51733 - NULL Pointer Dereference
CVE-2021-3449
CWE-476 Medium
Available
No
- 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450
CWE-254 Medium
No
No
- 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU52194 - Incorrect Regular Expression
CVE-2021-27290
CWE-185 Medium
No
No
- 12.03.2021 SB2021041364
SB2021070819
SB2021101939
and 32 more
#VU51014 - Resource Management Errors
CVE-2021-25122
CWE-399 Medium
No
No
- 01.03.2021 SB2021030115
SB2021031619
SB2021032519
and 23 more
#VU51012 - Deserialization of Untrusted Data
CVE-2021-25329
CWE-502 Medium
No
No
- 01.03.2021 SB2021030115
SB2021031620
SB2021040723
and 16 more
#VU50955 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-22884
CWE-350 Medium
No
No
- 25.02.2021 SB2021022530
SB2021022532
SB2021022616
and 38 more
#VU50954 - Resource Management Errors
CVE-2021-22883
CWE-399 Medium
No
No
- 25.02.2021 SB2021022530
SB2021022532
SB2021022614
and 36 more
#VU50814 - Improper input validation
CVE-2021-23336
CWE-20 Medium
No
No
- 19.02.2021 SB2021021907
SB2021022001
SB2021022706
and 56 more
#VU50745 - Improper input validation
CVE-2021-23840
CWE-20 Medium
No
No
- 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU50621 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-27619
CWE-94 Medium
No
No
- 11.02.2021 SB2020112330
SB2021032307
SB2021032607
and 24 more
#VU28158 - Deserialization of Untrusted Data
CVE-2020-9484
CWE-502 High
Available
No
- 21.05.2020 SB2020052124
SB2020052501
SB2020053102
and 47 more


Showing elements 81 - 100 out of 96