Known vulnerabilities in SUSE Linux Enterprise Server 12-SP3 - page 5

Vendor: SUSE
Version: 12-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 121
Public exploits: 8
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 12-SP3 SUSE Linux Enterprise Server 12-SP3 is affected by 121 vulnerabilities: 12 high, 60 medium, 49 low Critical High Medium Low

Vulnerabilities (121)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82817 - Incorrect Permission Assignment for Critical Resource
CVE-2022-22941
CWE-732 Medium
No
No
- 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU82815 - Authentication Bypass by Capture-replay
CVE-2022-22936
CWE-294 Medium
No
No
- 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU82801 - Insufficient Verification of Data Authenticity
CVE-2022-22935
CWE-345 Medium
No
No
- 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 20 more
#VU82800 - Cryptographic Issues
CVE-2022-22934
CWE-310 Low
No
No
- 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU64805 - Improper input validation
CVE-2021-43565
CWE-20 Medium
No
No
- 29.06.2022 SB2021120347
SB2022062928
SB2022072127
and 39 more
#VU64377 - Improper input validation
CVE-2022-21180
CWE-20 Low
No
No
- 14.06.2022 SB2022061468
SB2022061630
SB2022061631
and 15 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166
CWE-200 Low
No
No
- 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU64030 - Resource exhaustion
CVE-2021-44906
CWE-400 High
No
No
- 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 52 more
#VU63961 - Improper Access Control
CVE-2022-21499
CWE-284 Low
No
No
- 03.06.2022 SB2022060302
SB2022060303
SB2022060822
and 39 more
#VU63631 - Incorrect Default Permissions
CVE-2022-30594
CWE-276 Low
No
No
- 25.05.2022 SB2022052605
SB2022052606
SB2022060109
and 57 more
#VU63164 - Double Free
CVE-2022-28390
CWE-415 Low
No
No
- 13.05.2022 SB2022051312
SB2022051712
SB2022051833
and 61 more
#VU63160 - Double Free
CVE-2022-28388
CWE-415 Low
No
No
- 13.05.2022 SB2022051312
SB2022051712
SB2022060826
and 52 more
#VU62077 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24801
CWE-444 Medium
No
No
- 12.04.2022 SB2022041212
SB2022050231
SB2022050232
and 21 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191
CWE-327 Medium
No
No
- 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU61662 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-24302
CWE-362 Low
No
No
- 28.03.2022 SB2022032832
SB2022032837
SB2022033014
and 20 more
#VU61600 - Permissions, Privileges, and Access Controls
CVE-2022-24769
CWE-264 Medium
No
No
- 24.03.2022 SB2022032414
SB2022032503
SB2022042141
and 29 more
#VU61471 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0235
CWE-200 Low
No
No
- 20.03.2022 SB2022032001
SB2022032002
SB2022032009
and 35 more
#VU60972 - Permissions, Privileges, and Access Controls
CVE-2022-23648
CWE-264 Medium
Public exploit available
No
- 03.03.2022 SB2022030305
SB2022030722
SB2022030725
and 30 more
#VU58229 - Type confusion
CVE-2021-41190
CWE-843 Low
No
No
- 18.11.2021 SB2021111806
SB2021111807
SB2021111809
and 39 more
#VU19388 - Credentials Management
CVE-2018-18074
CWE-255 High
No
No
- 26.07.2019 SB2019072007
SB2019080710
SB2020032626
and 18 more


Showing elements 81 - 100 out of 121