Known vulnerabilities in SUSE Linux Enterprise Server 12-SP3-LTSS

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 12-SP3-LTSS

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 744

Public exploits: 39

Known exploited (KEV): 22

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (744)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2015-20107	CWE-78	High	No	No	-	22.06.2022	SB2022062206 SB2022062207 SB2022062436 and 85 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2068	CWE-78	Medium	No	No	-	21.06.2022	SB2022062120 SB2022062125 SB2022062236 and 135 more
#VU64430 - Incorrect Authorization CVE-2021-41244	CWE-863	Medium	No	No	-	16.06.2022	SB2021111513 SB2022062026 SB2022102094 and 5 more
#VU64404 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-43815	CWE-22	Low	No	No	-	15.06.2022	SB2021121022 SB2022062026 SB2022102094 and 8 more
#VU64402 - Exposure of sensitive information to an unauthorized actor CVE-2022-21673	CWE-200	Low	No	No	-	15.06.2022	SB2022061623 SB2022062026 SB2022081215 and 12 more
#VU64399 - Cross-Site Request Forgery (CSRF) CVE-2022-21703	CWE-352	Medium	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-21702	CWE-79	Low	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key CVE-2022-21713	CWE-639	Low	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 13 more
#VU64273 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-43813	CWE-22	Low	No	No	-	14.06.2022	SB2022061422 SB2022062026 SB2022081215 and 16 more
#VU64083 - Out-of-bounds read CVE-2022-28615	CWE-125	Low	No	No	-	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 41 more
#VU64081 - Out-of-bounds read CVE-2022-28614	CWE-125	Low	No	No	-	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 36 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-26377	CWE-444	Medium	Public exploit available	No	-	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 39 more
#VU62830 - Heap-based Buffer Overflow CVE-2022-24903	CWE-122	High	No	No	-	05.05.2022	SB2022050524 SB2022050920 SB2022052425 and 45 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292	CWE-78	Medium	Public exploit available	No	-	03.05.2022	SB2022050315 SB2022050436 SB2022050503 and 141 more
#VU61599 - Improper input validation CVE-2022-21698	CWE-20	Medium	No	No	-	24.03.2022	SB2022021530 SB2022032413 SB2022040807 and 110 more
#VU58647 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-43798	CWE-22	High	Public exploit available	Exploited	-	08.12.2021	SB2021120803 SB2022062026 SB2022102094 and 7 more
#VU57926 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41174	CWE-79	Low	Public exploit available	No	-	03.11.2021	SB2021110312 SB2021110517 SB2022062026 and 4 more
#VU57320 - Improper Access Control CVE-2021-39226	CWE-284	Medium	Public exploit available	Exploited	-	12.10.2021	SB2021101262 SB2021101320 SB2021101321 and 22 more
#VU56063 - Memory corruption CVE-2021-3711	CWE-119	High	No	No	-	24.08.2021	SB2021082414 SB2021082508 SB2021082510 and 53 more
#VU55287 - NULL Pointer Dereference CVE-2021-36222	CWE-476	Medium	No	No	-	25.07.2021	SB2021072501 SB2021072502 SB2021080601 and 24 more

Showing elements 1 - 20 out of 744

Known vulnerabilities in SUSE Linux Enterprise Server 12-SP3-LTSS

Vulnerabilities by Severity

Vulnerabilities (744)

Please verify you're human