Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 4

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 12-SP2-LTSS-ERICSSON

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 389

Public exploits: 27

Known exploited (KEV): 6

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (389)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU93880 - Server-Side Request Forgery (SSRF) CVE-2024-22020	CWE-918	Medium	No	No	-	09.07.2024	SB2024070937 SB2024071636 SB20240717119 and 30 more
#VU93879 - Command injection CVE-2024-36138	CWE-77	Medium	No	No	-	09.07.2024	SB2024070937 SB2024071636 SB20240717119 and 12 more
#VU91107 - Improper input validation CVE-2024-5458	CWE-20	Medium	No	No	-	05.06.2024	SB2024060501 SB2024060502 SB2024060503 and 18 more
#VU90156 - Security Features CVE-2024-35195	CWE-254	Low	No	No	-	31.05.2024	SB2024053174 SB2024053188 SB2024053192 and 116 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-34064	CWE-79	Medium	No	No	-	20.05.2024	SB2024052067 SB2024052081 SB2024052082 and 83 more
#VU89210 - Incorrect Authorization CVE-2023-6152	CWE-863	Low	No	No	-	07.05.2024	SB2024050715 SB2024050717 SB2024050718 and 8 more
#VU89149 - Improper Control of Generation of Code ('Code Injection') CVE-2024-34069	CWE-94	Medium	No	No	-	06.05.2024	SB2024050606 SB2024050723 SB2024050930 and 54 more
#VU88828 - Resource exhaustion CVE-2024-3651	CWE-400	Medium	No	No	-	19.04.2024	SB2024041905 SB2024041906 SB2024041907 and 112 more
#VU88484 - Improper Authentication CVE-2024-3096	CWE-287	High	No	No	-	11.04.2024	SB2024041173 SB2024041175 SB2024041176 and 25 more
#VU88483 - Security Features CVE-2024-2756	CWE-254	Low	No	No	-	11.04.2024	SB2024041173 SB2024041175 SB2024041176 and 24 more
#VU88462 - Command injection CVE-2024-27980	CWE-77	Medium	No	No	-	11.04.2024	SB2024041122 SB2024041155 SB2024041156 and 20 more
#VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-27982	CWE-444	Medium	No	No	-	05.04.2024	SB2024040526 SB2024040851 SB2024040852 and 53 more
#VU87845 - Improper Authorization CVE-2024-1313	CWE-285	Medium	No	No	-	27.03.2024	SB2024032711 SB2024043089 SB2024050720 and 10 more
#VU87685 - Resource exhaustion CVE-2024-0450	CWE-400	Medium	No	No	-	21.03.2024	SB2024032107 SB2024032110 SB2024040848 and 80 more
#VU86795 - Improper input validation CVE-2023-29483	CWE-20	Medium	No	No	-	26.02.2024	SB2024022638 SB2024040115 SB2024042448 and 37 more
#VU86612 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-22232	CWE-22	Medium	No	No	-	20.02.2024	SB2024022022 SB2024022023 SB2024022024 and 14 more
#VU86611 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-22231	CWE-22	Low	No	No	-	20.02.2024	SB2024022022 SB2024022023 SB2024022024 and 13 more
#VU86230 - Resource exhaustion CVE-2023-52425	CWE-400	Medium	No	No	-	07.02.2024	SB2024020750 SB2024020754 SB2024020765 and 118 more
#VU68336 - UNIX Symbolic Link (Symlink) Following CVE-2019-3698	CWE-61	Low	No	No	-	14.10.2022	SB2022101445 SB2024051429 SB2024061808
#VU1344 - UNIX Symbolic Link (Symlink) Following CVE-2016-9566	CWE-61	Low	Public exploit available	No	-	16.12.2016	SB2016121601 SB2016123102 SB2022101445 and 2 more

Showing elements 61 - 80 out of 389

Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 4

Vulnerabilities by Severity

Vulnerabilities (389)

Please verify you're human