Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 19

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 12-SP2-LTSS-ERICSSON

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 398

Public exploits: 29

Known exploited (KEV): 8

Vulnerabilities by Severity

Vulnerabilities (398)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68887 - Integer overflow CVE-2022-37454	CWE-190	High	Public exploit available	No	-	01.11.2022	SB2022110118 SB2022110119 SB2022110209 and 69 more
#VU68886 - Out-of-bounds read CVE-2022-31630	CWE-125	Medium	No	No	-	01.11.2022	SB2022110119 SB2022110336 SB2022110814 and 21 more
#VU67755 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-31628	CWE-835	Medium	No	No	-	29.09.2022	SB2022092960 SB2022093041 SB2022101944 and 26 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2021-28861	CWE-601	Low	No	No	-	22.09.2022	SB2022092243 SB2022092244 SB2022093032 and 76 more
#VU67166 - Server-Side Request Forgery (SSRF) CVE-2022-35949	CWE-918	Medium	No	No	-	11.09.2022	SB2022091109 SB2022091110 SB2022091217 and 4 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-35948	CWE-93	Medium	No	No	-	11.09.2022	SB2022091109 SB2022091110 SB2022091217 and 8 more
#VU67163 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-31150	CWE-93	Medium	No	No	-	11.09.2022	SB2022091108 SB2022091110 SB2022091217 and 2 more
#VU66698 - Exposure of sensitive information to an unauthorized actor CVE-2022-29244	CWE-200	Medium	No	No	-	22.08.2022	SB2022082252 SB2022082253 SB2022091110 and 15 more
#VU66201 - Security Features CVE-2022-2255	CWE-254	Medium	No	No	-	09.08.2022	SB2022080904 SB2022080914 SB2022111643 and 6 more
#VU65771 - Information Exposure Through Timing Discrepancy CVE-2020-25657	CWE-208	Medium	No	No	-	26.07.2022	SB2021011288 SB2022072601 SB2022072602 and 7 more
#VU64922 - Missing Encryption of Sensitive Data CVE-2022-2097	CWE-311	Low	No	No	-	05.07.2022	SB2022070509 SB2022070522 SB2022070531 and 112 more
#VU63168 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-29217	CWE-327	Medium	No	No	-	13.05.2022	SB2022051319 SB2022071428 SB2022071429 and 12 more
#VU62794 - Unprotected Transport of Credentials CVE-2021-27023	CWE-523	Medium	No	No	-	04.05.2022	SB2022050414 SB2022050430 SB2022060135 and 5 more
#VU52195 - Use of a Broken or Risky Cryptographic Algorithm CVE-2021-20305	CWE-327	High	No	No	-	06.04.2021	SB2021041367 SB2021041616 SB2021041803 and 36 more
#VU51777 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-28957	CWE-79	Low	No	No	-	30.03.2021	SB2021033001 SB2021033005 SB2021040175 and 20 more
#VU50621 - Improper Control of Generation of Code ('Code Injection') CVE-2020-27619	CWE-94	Medium	No	No	-	11.02.2021	SB2020112330 SB2021032307 SB2021032607 and 24 more
#VU48793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-27783	CWE-79	Medium	No	No	-	03.12.2020	SB2020120602 SB2020120603 SB2020121305 and 20 more
#VU26356 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2020-10109	CWE-444	Medium	No	No	-	24.03.2020	SB2020031234 SB2020032419 SB2020043028 and 9 more
#VU25721 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-8130	CWE-78	High	No	No	-	02.03.2020	SB2020030203 SB2020033103 SB2020052720 and 6 more
#VU30827 - Insufficient Entropy CVE-2019-14806	CWE-331	Medium	No	No	-	09.08.2019	SB2019080917 SB2019091736 SB2019091156 and 4 more

Showing elements 361 - 380 out of 398

Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 19

Vulnerabilities by Severity

Vulnerabilities (398)

Please verify you're human