Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 6

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 12-SP2-LTSS-ERICSSON

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 389

Public exploits: 27

Known exploited (KEV): 6

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (389)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU82944 - UNIX Symbolic Link (Symlink) Following CVE-2023-34049	CWE-61	Low	No	No	-	09.11.2023	SB2023110931 SB2023110932 SB2023110933 and 17 more
#VU79967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-40577	CWE-79	Low	No	No	-	25.08.2023	SB2023082505 SB2024012403 SB2024021614 and 5 more
#VU72132 - Improper Authentication CVE-2022-39229	CWE-287	Low	No	No	-	12.02.2023	SB2023021201 SB2023021202 SB2023021203 and 13 more
#VU72131 - Exposure of sensitive information to an unauthorized actor CVE-2022-39201	CWE-200	Medium	No	No	-	12.02.2023	SB2023021201 SB2023021202 SB2023021203 and 12 more
#VU72130 - Exposure of sensitive information to an unauthorized actor CVE-2022-31130	CWE-200	Medium	No	No	-	12.02.2023	SB2023021201 SB2023021202 SB2023021203 and 11 more
#VU72128 - Improper Verification of Cryptographic Signature CVE-2022-31123	CWE-347	Medium	No	No	-	11.02.2023	SB2023021201 SB2023021202 SB2023021203 and 15 more
#VU69485 - Exposure of sensitive information to an unauthorized actor CVE-2022-39307	CWE-200	Medium	No	No	-	22.11.2022	SB2022112220 SB2023021202 SB2023021203 and 12 more
#VU69484 - Improper input validation CVE-2022-39306	CWE-20	Medium	No	No	-	22.11.2022	SB2022112220 SB2023021202 SB2023021203 and 12 more
#VU64430 - Incorrect Authorization CVE-2021-41244	CWE-863	Medium	No	No	-	16.06.2022	SB2021111513 SB2022062026 SB2022102094 and 5 more
#VU64404 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-43815	CWE-22	Low	No	No	-	15.06.2022	SB2021121022 SB2022062026 SB2022102094 and 8 more
#VU64402 - Exposure of sensitive information to an unauthorized actor CVE-2022-21673	CWE-200	Low	No	No	-	15.06.2022	SB2022061623 SB2022062026 SB2022081215 and 12 more
#VU64399 - Cross-Site Request Forgery (CSRF) CVE-2022-21703	CWE-352	Medium	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-21702	CWE-79	Low	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key CVE-2022-21713	CWE-639	Low	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 13 more
#VU64273 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-43813	CWE-22	Low	No	No	-	14.06.2022	SB2022061422 SB2022062026 SB2022081215 and 16 more
#VU63461 - Improper input validation CVE-2022-29170	CWE-20	Low	No	No	-	19.05.2022	SB2022051916 SB2024012352 SB2024012403 and 3 more
#VU61599 - Improper input validation CVE-2022-21698	CWE-20	Medium	No	No	-	24.03.2022	SB2022021530 SB2022032413 SB2022040807 and 110 more
#VU58647 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-43798	CWE-22	High	Public exploit available	Exploited	-	08.12.2021	SB2021120803 SB2022062026 SB2022102094 and 7 more
#VU57926 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41174	CWE-79	Low	Public exploit available	No	-	03.11.2021	SB2021110312 SB2021110517 SB2022062026 and 4 more
#VU57320 - Improper Access Control CVE-2021-39226	CWE-284	Medium	Public exploit available	Exploited	-	12.10.2021	SB2021101262 SB2021101320 SB2021101321 and 22 more

Showing elements 101 - 120 out of 389

Known vulnerabilities in SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON - page 6

Vulnerabilities by Severity

Vulnerabilities (389)

Please verify you're human