Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 13

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 12-SP2-LTSS-ERICSSON

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 389

Public exploits: 27

Known exploited (KEV): 6

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (389)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68887 - Integer overflow CVE-2022-37454	CWE-190	High	Public exploit available	No	-	01.11.2022	SB2022110118 SB2022110119 SB2022110209 and 69 more
#VU68886 - Out-of-bounds read CVE-2022-31630	CWE-125	Medium	No	No	-	01.11.2022	SB2022110119 SB2022110336 SB2022110814 and 21 more
#VU67756 - Security Features CVE-2022-31629	CWE-254	Low	Public exploit available	No	-	29.09.2022	SB2022092960 SB2022093041 SB2022101944 and 49 more
#VU67755 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-31628	CWE-835	Medium	No	No	-	29.09.2022	SB2022092960 SB2022093041 SB2022101944 and 26 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2021-28861	CWE-601	Low	No	No	-	22.09.2022	SB2022092243 SB2022092244 SB2022093032 and 76 more
#VU67166 - Server-Side Request Forgery (SSRF) CVE-2022-35949	CWE-918	Medium	No	No	-	11.09.2022	SB2022091109 SB2022091110 SB2022091217 and 4 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-35948	CWE-93	Medium	No	No	-	11.09.2022	SB2022091109 SB2022091110 SB2022091217 and 4 more
#VU67163 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-31150	CWE-93	Medium	No	No	-	11.09.2022	SB2022091108 SB2022091110 SB2022091217 and 2 more
#VU66698 - Exposure of sensitive information to an unauthorized actor CVE-2022-29244	CWE-200	Medium	No	No	-	22.08.2022	SB2022082252 SB2022082253 SB2022091110 and 15 more
#VU66201 - Security Features CVE-2022-2255	CWE-254	Medium	No	No	-	09.08.2022	SB2022080904 SB2022080914 SB2022111643 and 6 more
#VU64232 - Use of Uninitialized Resource CVE-2022-31625	CWE-908	High	No	No	-	14.06.2022	SB2022061403 SB2022061404 SB2022061529 and 23 more
#VU64231 - Memory corruption CVE-2022-31626	CWE-119	High	Public exploit available	No	-	14.06.2022	SB2022061403 SB2022061404 SB2022061529 and 25 more
#VU62794 - Unprotected Transport of Credentials CVE-2021-27023	CWE-523	Medium	No	No	-	04.05.2022	SB2022050414 SB2022050430 SB2022060135 and 5 more
#VU56905 - Absolute Path Traversal CVE-2021-21706	CWE-36	Medium	No	No	-	29.09.2021	SB2021092901 SB2021093001 SB2022111831 and 1 more
#VU54565 - Server-Side Request Forgery (SSRF) CVE-2021-21705	CWE-918	Medium	No	No	-	06.07.2021	SB2021070611 SB2021070612 SB2021070613 and 21 more
#VU54520 - Improper input validation CVE-2020-14343	CWE-20	High	Public exploit available	No	-	04.07.2021	SB2021070403 SB2021070404 SB2022042259 and 17 more
#VU51777 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-28957	CWE-79	Low	No	No	-	30.03.2021	SB2021033001 SB2021033005 SB2021040175 and 20 more
#VU48793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-27783	CWE-79	Medium	No	No	-	03.12.2020	SB2020120602 SB2020120603 SB2020121305 and 20 more
#VU25823 - Improper input validation CVE-2020-1747	CWE-20	High	No	No	-	09.03.2020	SB2020030903 SB2020041201 SB2020051129 and 21 more
#VU30827 - Insufficient Entropy CVE-2019-14806	CWE-331	Medium	No	No	-	09.08.2019	SB2019080917 SB2019091736 SB2019091156 and 4 more

Showing elements 241 - 260 out of 389

Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 13

Vulnerabilities by Severity

Vulnerabilities (389)

Please verify you're human