Known vulnerabilities in SUSE Linux Enterprise Server 12-SP3 - page 3

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 12-SP3

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 121

Public exploits: 8

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (121)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU67166 - Server-Side Request Forgery (SSRF) CVE-2022-35949	CWE-918	Medium	No	No	-	11.09.2022	SB2022091109 SB2022091110 SB2022091217 and 4 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-35948	CWE-93	Medium	No	No	-	11.09.2022	SB2022091109 SB2022091110 SB2022091217 and 4 more
#VU67163 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-31150	CWE-93	Medium	No	No	-	11.09.2022	SB2022091108 SB2022091110 SB2022091217 and 2 more
#VU66698 - Exposure of sensitive information to an unauthorized actor CVE-2022-29244	CWE-200	Medium	No	No	-	22.08.2022	SB2022082252 SB2022082253 SB2022091110 and 15 more
#VU65771 - Information Exposure Through Timing Discrepancy CVE-2020-25657	CWE-208	Medium	No	No	-	26.07.2022	SB2021011288 SB2022072601 SB2022072602 and 7 more
#VU64922 - Missing Encryption of Sensitive Data CVE-2022-2097	CWE-311	Low	No	No	-	05.07.2022	SB2022070509 SB2022070522 SB2022070531 and 112 more
#VU64660 - Improper Authentication CVE-2022-22967	CWE-287	Low	No	No	-	24.06.2022	SB2022062428 SB2022062430 SB2022062441 and 13 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2015-20107	CWE-78	High	No	No	-	22.06.2022	SB2022062206 SB2022062207 SB2022062436 and 85 more
#VU64436 - Exposure of sensitive information to an unauthorized actor CVE-2017-13695	CWE-200	Low	No	No	-	16.06.2022	SB2022061630 SB2022061634 SB2022061725 and 6 more
#VU64007 - Resource exhaustion CVE-2022-31030	CWE-400	Medium	No	No	-	07.06.2022	SB2022060702 SB2022061206 SB2022061326 and 23 more
#VU63945 - Out-of-bounds read CVE-2022-1586	CWE-125	Medium	No	No	-	02.06.2022	SB2022060210 SB2022071156 SB2022071217 and 71 more
#VU63168 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-29217	CWE-327	Medium	No	No	-	13.05.2022	SB2022051319 SB2022071428 SB2022071429 and 12 more
#VU63090 - Permissions, Privileges, and Access Controls CVE-2022-29162	CWE-264	Medium	No	No	-	12.05.2022	SB2022051205 SB2022062435 SB2022071158 and 32 more
#VU61017 - Memory corruption CVE-2022-21716	CWE-119	Medium	No	No	-	04.03.2022	SB2022030407 SB2022032438 SB2022032448 and 17 more
#VU54520 - Improper input validation CVE-2020-14343	CWE-20	High	Public exploit available	No	-	04.07.2021	SB2021070403 SB2021070404 SB2022042259 and 17 more
#VU26356 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2020-10109	CWE-444	Medium	No	No	-	24.03.2020	SB2020031234 SB2020032419 SB2020043028 and 8 more
#VU25823 - Improper input validation CVE-2020-1747	CWE-20	High	No	No	-	09.03.2020	SB2020030903 SB2020041201 SB2020051129 and 21 more
#VU25721 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-8130	CWE-78	High	No	No	-	02.03.2020	SB2020030203 SB2020033103 SB2020052720 and 5 more
#VU17858 - Resource exhaustion CVE-2018-20784	CWE-400	Low	No	No	-	26.02.2019	SB2019022606 SB2022061630 SB2022061634 and 3 more
#VU10918 - Permissions, Privileges, and Access Controls CVE-2018-7755	CWE-264	Low	No	No	-	12.03.2018	SB2018030603 SB2019080809 SB2019080902 and 10 more

Showing elements 41 - 60 out of 121

Known vulnerabilities in SUSE Linux Enterprise Server 12-SP3 - page 3

Vulnerabilities by Severity

Vulnerabilities (121)

Please verify you're human