Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 13

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 12-SP2-LTSS-ERICSSON

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 398

Public exploits: 29

Known exploited (KEV): 8

Vulnerabilities by Severity

Vulnerabilities (398)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU74193 - Improper preservation of permissions CVE-2023-28642	CWE-281	Medium	No	No	-	30.03.2023	SB2023033025 SB2023040327 SB2023042614 and 29 more
#VU74190 - Improper Access Control CVE-2023-27561	CWE-284	Low	No	No	-	30.03.2023	SB2023033025 SB2023040327 SB2023042614 and 40 more
#VU74189 - Improper preservation of permissions CVE-2023-25809	CWE-281	Low	No	No	-	30.03.2023	SB2023033025 SB2023040327 SB2023042614 and 23 more
#VU73960 - Resource exhaustion CVE-2023-0464	CWE-400	Medium	No	No	-	22.03.2023	SB2023032241 SB2023033057 SB2023033058 and 100 more
#VU72339 - Resource exhaustion CVE-2023-25577	CWE-400	Medium	No	No	-	16.02.2023	SB2023021673 SB2023022875 SB2023031332 and 49 more
#VU72321 - Improper Privilege Management CVE-2022-36109	CWE-269	Low	No	No	-	16.02.2023	SB2023021619 SB2023021620 SB2023031742 and 14 more
#VU71689 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2022-46174	CWE-362	Low	No	No	-	31.01.2023	SB2023013108 SB2023013109 SB2023013114 and 4 more
#VU70039 - Resource exhaustion CVE-2022-23471	CWE-400	Medium	No	No	-	08.12.2022	SB2022120802 SB2022121324 SB2022122112 and 27 more
#VU64805 - Improper input validation CVE-2021-43565	CWE-20	Medium	No	No	-	29.06.2022	SB2021120347 SB2022062928 SB2022072127 and 39 more
#VU62512 - Improper input validation CVE-2021-3572	CWE-20	Medium	No	No	-	22.04.2022	SB2022042257 SB2022042259 SB2021071390 and 51 more
#VU62077 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-24801	CWE-444	Medium	No	No	-	12.04.2022	SB2022041212 SB2022050231 SB2022050232 and 21 more
#VU61681 - Server-Side Request Forgery (SSRF) CVE-2021-4189	CWE-918	Medium	No	No	-	29.03.2022	SB2022032904 SB2022032905 SB2022032907 and 42 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-0391	CWE-93	Medium	No	No	-	29.03.2022	SB2022032903 SB2022032905 SB2022032907 and 49 more
#VU61662 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2022-24302	CWE-362	Low	No	No	-	28.03.2022	SB2022032832 SB2022032837 SB2022033014 and 20 more
#VU61611 - Origin Validation Error CVE-2022-21712	CWE-346	Low	No	No	-	24.03.2022	SB2022032429 SB2022032438 SB2022032448 and 15 more
#VU61600 - Permissions, Privileges, and Access Controls CVE-2022-24769	CWE-264	Medium	No	No	-	24.03.2022	SB2022032414 SB2022032503 SB2022042141 and 29 more
#VU60972 - Permissions, Privileges, and Access Controls CVE-2022-23648	CWE-264	Medium	Public exploit available	No	-	03.03.2022	SB2022030305 SB2022030722 SB2022030725 and 31 more
#VU58229 - Type confusion CVE-2021-41190	CWE-843	Low	No	No	-	18.11.2021	SB2021111806 SB2021111807 SB2021111809 and 39 more
#VU25847 - Improper Access Control CVE-2019-19921	CWE-284	Low	No	No	-	10.03.2020	SB2020021224 SB2020031004 SB2020031116 and 35 more
#VU19388 - Credentials Management CVE-2018-18074	CWE-255	High	No	No	-	26.07.2019	SB2019072007 SB2019080710 SB2020032626 and 19 more

Showing elements 241 - 260 out of 398

Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 13

Vulnerabilities by Severity

Vulnerabilities (398)

Please verify you're human