Known vulnerabilities in SUSE Linux Enterprise Server 12-SP4

Vendor: SUSE
Version: 12-SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 218
Public exploits: 13
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 12-SP4 SUSE Linux Enterprise Server 12-SP4 is affected by 218 vulnerabilities: 15 high, 70 medium, 133 low Critical High Medium Low

Vulnerabilities (218)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71642 - Incorrect Regular Expression
CVE-2022-42969
CWE-185 Medium
No
No
- 30.01.2023 SB2023013033
SB2023013037
SB2023021338
and 11 more
#VU71486 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-20251
CWE-362 Low
No
No
- 24.01.2023 SB2023012451
SB2023012452
SB2023012453
and 13 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897
CWE-185 Medium
No
No
- 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU71377 - Improper input validation
CVE-2022-40898
CWE-20 Medium
No
No
- 20.01.2023 SB2023012007
SB2023012013
SB2023012014
and 22 more
#VU71137 - Incorrect Regular Expression
CVE-2022-40899
CWE-185 Medium
No
No
- 12.01.2023 SB2023011234
SB2023011239
SB2023011240
and 25 more
#VU70788 - Integer overflow
CVE-2022-31631
CWE-190 Medium
No
No
- 07.01.2023 SB2023010702
SB2023010704
SB2023011201
and 21 more
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548
CWE-350 Medium
No
No
- 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU69151 - Security Features
CVE-2022-38023
CWE-254 High
No
No
- 09.11.2022 SB2022110912
SB2022121537
SB2022121801
and 46 more
#VU69094 - Permissions, Privileges, and Access Controls
CVE-2022-37966
CWE-264 High
No
No
- 08.11.2022 SB2022110822
SB2022121537
SB2022121801
and 23 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256
CWE-444 Medium
No
No
- 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU67849 - Use of Insufficiently Random Values
CVE-2022-35255
CWE-330 Medium
No
No
- 03.10.2022 SB2022100401
SB2022100402
SB2022100528
and 40 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215
CWE-444 Medium
No
No
- 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32214
CWE-444 Medium
No
No
- 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 36 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213
CWE-444 Medium
No
No
- 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU65273 - Improper Check or Handling of Exceptional Conditions
CVE-2022-32212
CWE-703 Medium
No
No
- 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 48 more
#VU65221 - Processor optimization removal or modification of security-critical code
CVE-2022-28693
CWE-1037 Low
No
No
- 13.07.2022 SB2022071301
SB2022071302
SB2022081126
and 21 more
#VU64920 - NULL Pointer Dereference
CVE-2022-2153
CWE-476 Low
No
No
- 05.07.2022 SB2022070608
SB2022070743
SB2022101105
and 32 more
#VU63923 - Improper Access Control
CVE-2021-4037
CWE-284 Low
No
No
- 02.06.2022 SB2022060205
SB2022060206
SB2022062928
and 37 more
#VU16112 - Permissions, Privileges, and Access Controls
CVE-2015-3411
CWE-264 Low
No
No
- 27.11.2018 SB2015070601
SB2015071705
SB2023011201
#VU31834 - Out-of-bounds read
CVE-2014-9709
CWE-125 Medium
No
No
- 30.03.2015 SB2015033001
SB2015051316
SB2015041703
and 3 more


Showing elements 1 - 20 out of 218