Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 15

Vendor: SUSE
Version: 12-SP2-LTSS-ERICSSON
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 394
Public exploits: 27
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 12-SP2-LTSS-ERICSSON SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON is affected by 394 vulnerabilities: 1 critical, 36 high, 224 medium, 133 low Critical High Medium Low

Vulnerabilities (394)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82817 - Incorrect Permission Assignment for Critical Resource
CVE-2022-22941
CWE-732 Medium
No
No
- 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU82815 - Authentication Bypass by Capture-replay
CVE-2022-22936
CWE-294 Medium
No
No
- 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU82801 - Insufficient Verification of Data Authenticity
CVE-2022-22935
CWE-345 Medium
No
No
- 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 20 more
#VU64034 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3918
CWE-94 High
No
No
- 07.06.2022 SB2021111302
SB2022060836
SB2022071504
and 45 more
#VU62512 - Improper input validation
CVE-2021-3572
CWE-20 Medium
No
No
- 22.04.2022 SB2022042257
SB2022042259
SB2021071390
and 51 more
#VU61681 - Server-Side Request Forgery (SSRF)
CVE-2021-4189
CWE-918 Medium
No
No
- 29.03.2022 SB2022032904
SB2022032905
SB2022032907
and 42 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391
CWE-93 Medium
No
No
- 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU61611 - Origin Validation Error
CVE-2022-21712
CWE-346 Low
No
No
- 24.03.2022 SB2022032429
SB2022032438
SB2022032448
and 15 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Public exploit available
No
- 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU60707 - Use After Free
CVE-2021-21708
CWE-416 Medium
Public exploit available
No
- 18.02.2022 SB2022021804
SB2022021813
SB2022022118
and 19 more
#VU59551 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21824
CWE-94 Medium
No
No
- 12.01.2022 SB2022011216
SB2022041205
SB2022060315
and 39 more
#VU58331 - Improper input validation
CVE-2021-21707
CWE-20 Medium
No
No
- 23.11.2021 SB2021112317
SB2021112318
SB2022011821
and 21 more
#VU58206 - Absolute Path Traversal
CVE-2021-32803
CWE-36 Medium
No
No
- 17.11.2021 SB2021080329
SB2022031104
SB2022060618
and 26 more
#VU58205 - Absolute Path Traversal
CVE-2021-32804
CWE-36 Medium
No
No
- 17.11.2021 SB2021080328
SB2022031104
SB2022060618
and 27 more
#VU57967 - Improper input validation
CVE-2021-3807
CWE-20 Medium
No
No
- 05.11.2021 SB2021110513
SB2021112603
SB2022042257
and 51 more
#VU55315 - Incorrect Regular Expression
CVE-2021-23343
CWE-185 Medium
No
No
- 26.07.2021 SB2021072624
SB2021072625
SB2022060618
and 24 more
#VU50621 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-27619
CWE-94 Medium
No
No
- 11.02.2021 SB2020112330
SB2021032307
SB2021032607
and 24 more
#VU47103 - Use After Free
CVE-2020-0433
CWE-416 Low
No
No
- 17.09.2020 SB2021052548
SB2021041389
SB2021041390
and 6 more
#VU10880 - Resource exhaustion
CVE-2015-9253
CWE-400 Low
No
No
- 07.03.2018 SB2018021618
SB2018091805
SB2020021722
and 3 more
#VU10335 - Improper input validation
CVE-2017-8923
CWE-20 Low
No
No
- 12.05.2017 SB2017051517
SB2022111831
SB2022111832
and 5 more


Showing elements 281 - 300 out of 394