Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 3

Vendor: SUSE
Software: SUSE Linux Enterprise Server
Version: 12-SP2-LTSS-ERICSSON
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 389
Public exploits: 27
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 12-SP2-LTSS-ERICSSON SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON is affected by 389 vulnerabilities: 1 critical, 35 high, 221 medium, 132 low Critical High Medium Low

Vulnerabilities (389)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97748 - Improper input validation
CVE-2024-8925		 CWE-20 Medium
No
No
 - 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 16 more
#VU97747 - Insufficient Logging
CVE-2024-9026		 CWE-778 Low
No
No
 - 27.09.2024 SB2024092724
SB2024100148
SB2024101209
and 13 more
#VU97746 - Security Features
CVE-2024-8927		 CWE-254 Medium
No
No
 - 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 18 more
#VU96945 - Resource exhaustion
CVE-2024-7592		 CWE-400 Medium
No
No
 - 09.09.2024 SB2024090916
SB2024090917
SB2024090918
and 71 more
#VU96745 - Incorrect Regular Expression
CVE-2024-6232		 CWE-185 Medium
No
No
 - 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 144 more
#VU96712 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-45310		 CWE-362 Low
No
No
 - 03.09.2024 SB2024090315
SB2024091283
SB2024091416
and 18 more
#VU96055 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-42353		 CWE-601 Low
No
No
 - 15.08.2024 SB2024081552
SB2024081555
SB2024081556
and 44 more
#VU95571 - Command injection
CVE-2024-6923		 CWE-77 Medium
No
No
 - 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 143 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 - 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 159 more
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032		 CWE-684 Medium
No
No
 - 02.08.2024 SB2024080203
SB2024080207
SB2024080209
and 101 more
#VU94852 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-41671		 CWE-444 High
No
No
 - 30.07.2024 SB2024073015
SB20240805108
SB20240806193
and 11 more
#VU94851 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41810		 CWE-79 Low
No
No
 - 30.07.2024 SB2024073015
SB20240805108
SB20240806193
and 11 more
#VU94762 - Incorrect Authorization
CVE-2024-41110		 CWE-863 Medium
No
No
 - 26.07.2024 SB2024072641
SB2024080330
SB2024080739
and 39 more
#VU94616 - Information Exposure Through Log Files
CVE-2024-6104		 CWE-532 Low
No
No
 - 19.07.2024 SB2024071927
SB2024071929
SB2024071930
and 83 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 - 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 193 more
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Public exploit available
No
 - 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 187 more
#VU84507 - Resource exhaustion
CVE-2023-47108		 CWE-400 Medium
No
No
 - 18.12.2023 SB2023121825
SB2023122137
SB2024010436
and 55 more
#VU83546 - Resource exhaustion
CVE-2023-45142		 CWE-400 Medium
No
No
 - 29.11.2023 SB2023112912
SB2023112913
SB2023112949
and 54 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978		 CWE-79 Low
No
No
 - 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 53 more
#VU25547 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-14868		 CWE-78 Low
No
No
 - 24.02.2020 SB2020022414
SB2020022415
SB2020022417
and 14 more


Showing elements 41 - 60 out of 389