Known vulnerabilities in SUSE Linux Enterprise Server 12-SP4

Vendor: SUSE
Version: 12-SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 218
Public exploits: 13
Known exploited (KEV): 1

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 12-SP4 SUSE Linux Enterprise Server 12-SP4 is affected by 218 vulnerabilities: 15 high, 70 medium, 133 low Critical High Medium Low

Vulnerabilities (218)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82817 - Incorrect Permission Assignment for Critical Resource
CVE-2022-22941
CWE-732 Medium
No
No
- 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU82815 - Authentication Bypass by Capture-replay
CVE-2022-22936
CWE-294 Medium
No
No
- 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU82801 - Insufficient Verification of Data Authenticity
CVE-2022-22935
CWE-345 Medium
No
No
- 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 20 more
#VU82800 - Cryptographic Issues
CVE-2022-22934
CWE-310 Low
No
No
- 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU78991 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-20316
CWE-362 Low
No
No
- 07.08.2023 SB2023080719
SB2023091702
SB2024080686
and 4 more
#VU65824 - Missing release of memory after effective lifetime
CVE-2022-32742
CWE-401 Low
No
No
- 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 36 more
#VU64805 - Improper input validation
CVE-2021-43565
CWE-20 Medium
No
No
- 29.06.2022 SB2021120347
SB2022062928
SB2022072127
and 39 more
#VU64030 - Resource exhaustion
CVE-2021-44906
CWE-400 High
No
No
- 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 53 more
#VU62077 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24801
CWE-444 Medium
No
No
- 12.04.2022 SB2022041212
SB2022050231
SB2022050232
and 21 more
#VU61600 - Permissions, Privileges, and Access Controls
CVE-2022-24769
CWE-264 Medium
No
No
- 24.03.2022 SB2022032414
SB2022032503
SB2022042141
and 29 more
#VU61471 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0235
CWE-200 Low
No
No
- 20.03.2022 SB2022032001
SB2022032002
SB2022032009
and 35 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Public exploit available
No
- 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU60972 - Permissions, Privileges, and Access Controls
CVE-2022-23648
CWE-264 Medium
Public exploit available
No
- 03.03.2022 SB2022030305
SB2022030722
SB2022030725
and 31 more
#VU60187 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-44141
CWE-59 Low
No
No
- 31.01.2022 SB2022013112
SB2022072819
SB2022121502
and 12 more
#VU60186 - Out-of-bounds write
CVE-2021-44142
CWE-787 High
Public exploit available
No
- 31.01.2022 SB2022013111
SB2022013118
SB2022013119
and 36 more
#VU60185 - Insufficient Verification of Data Authenticity
CVE-2022-0336
CWE-345 Low
No
No
- 31.01.2022 SB2022013110
SB2022021417
SB2022041954
and 10 more
#VU59345 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-43566
CWE-59 Low
No
No
- 10.01.2022 SB2022011006
SB2022041954
SB2022020185
and 7 more
#VU58229 - Type confusion
CVE-2021-41190
CWE-843 Low
No
No
- 18.11.2021 SB2021111806
SB2021111807
SB2021111809
and 39 more
#VU48944 - Memory corruption
CVE-2020-29361
CWE-119 Medium
No
No
- 14.12.2020 SB2020121401
SB2020121402
SB2020121422
and 22 more
#VU19388 - Credentials Management
CVE-2018-18074
CWE-255 High
No
No
- 26.07.2019 SB2019072007
SB2019080710
SB2020032626
and 19 more


Showing elements 1 - 20 out of 218