Known vulnerabilities in SUSE Linux Enterprise Server 12-SP3 - page 6

Vendor: SUSE
Version: 12-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 121
Public exploits: 8
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 12-SP3 SUSE Linux Enterprise Server 12-SP3 is affected by 121 vulnerabilities: 12 high, 60 medium, 49 low Critical High Medium Low

Vulnerabilities (121)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78991 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-20316
CWE-362 Low
No
No
- 07.08.2023 SB2023080719
SB2023091702
SB2024080686
and 4 more
#VU64034 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3918
CWE-94 High
No
No
- 07.06.2022 SB2021111302
SB2022060836
SB2022071504
and 45 more
#VU62512 - Improper input validation
CVE-2021-3572
CWE-20 Medium
No
No
- 22.04.2022 SB2022042257
SB2022042259
SB2021071390
and 51 more
#VU61681 - Server-Side Request Forgery (SSRF)
CVE-2021-4189
CWE-918 Medium
No
No
- 29.03.2022 SB2022032904
SB2022032905
SB2022032907
and 42 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391
CWE-93 Medium
No
No
- 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU61611 - Origin Validation Error
CVE-2022-21712
CWE-346 Low
No
No
- 24.03.2022 SB2022032429
SB2022032438
SB2022032448
and 15 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Public exploit available
No
- 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU60707 - Use After Free
CVE-2021-21708
CWE-416 Medium
Public exploit available
No
- 18.02.2022 SB2022021804
SB2022021813
SB2022022118
and 19 more
#VU60187 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-44141
CWE-59 Low
No
No
- 31.01.2022 SB2022013112
SB2022072819
SB2022121502
and 12 more
#VU60186 - Out-of-bounds write
CVE-2021-44142
CWE-787 High
Public exploit available
No
- 31.01.2022 SB2022013111
SB2022013118
SB2022013119
and 36 more
#VU59551 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21824
CWE-94 Medium
No
No
- 12.01.2022 SB2022011216
SB2022041205
SB2022060315
and 39 more
#VU59345 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-43566
CWE-59 Low
No
No
- 10.01.2022 SB2022011006
SB2022041954
SB2022020185
and 7 more
#VU58331 - Improper input validation
CVE-2021-21707
CWE-20 Medium
No
No
- 23.11.2021 SB2021112317
SB2021112318
SB2022011821
and 21 more
#VU58206 - Absolute Path Traversal
CVE-2021-32803
CWE-36 Medium
No
No
- 17.11.2021 SB2021080329
SB2022031104
SB2022060618
and 26 more
#VU58205 - Absolute Path Traversal
CVE-2021-32804
CWE-36 Medium
No
No
- 17.11.2021 SB2021080328
SB2022031104
SB2022060618
and 27 more
#VU57967 - Improper input validation
CVE-2021-3807
CWE-20 Medium
No
No
- 05.11.2021 SB2021110513
SB2021112603
SB2022042257
and 51 more
#VU55315 - Incorrect Regular Expression
CVE-2021-23343
CWE-185 Medium
No
No
- 26.07.2021 SB2021072624
SB2021072625
SB2022060618
and 24 more
#VU48944 - Memory corruption
CVE-2020-29361
CWE-119 Medium
No
No
- 14.12.2020 SB2020121401
SB2020121402
SB2020121422
and 22 more
#VU10880 - Resource exhaustion
CVE-2015-9253
CWE-400 Low
No
No
- 07.03.2018 SB2018021618
SB2018091805
SB2020021722
and 3 more
#VU10335 - Improper input validation
CVE-2017-8923
CWE-20 Low
No
No
- 12.05.2017 SB2017051517
SB2022111831
SB2022111832
and 5 more


Showing elements 101 - 120 out of 121