Known vulnerabilities in SUSE Linux Enterprise Server 12-SP5 - page 23

Vendor: SUSE
Version: 12-SP5
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 1647
Public exploits: 69
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 12-SP5 SUSE Linux Enterprise Server 12-SP5 is affected by 1647 vulnerabilities: 14 critical, 407 high, 558 medium, 668 low Critical High Medium Low

Vulnerabilities (1647)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68858 - Off-by-one Error
CVE-2021-46848
CWE-193 Medium
No
No
- 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU68830 - Out-of-bounds read
CVE-2019-8921
CWE-125 Low
No
No
- 30.10.2022 SB2021112924
SB2022103008
SB2022102158
and 2 more
#VU68829 - Resource Management Errors
CVE-2022-40304
CWE-399 Medium
No
No
- 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303
CWE-190 High
No
No
- 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU68746 - Expected Behavior Violation
CVE-2022-32221
CWE-440 Medium
No
No
- 26.10.2022 SB2022102624
SB2022102643
SB2022102644
and 58 more
#VU68723 - UNIX Symbolic Link (Symlink) Following
CVE-2022-41973
CWE-61 Low
No
No
- 26.10.2022 SB2022102601
SB2022102602
SB2022102603
and 28 more
#VU68722 - Improper Authorization
CVE-2022-41974
CWE-285 Low
No
No
- 26.10.2022 SB2022102601
SB2022102602
SB2022102603
and 43 more
#VU67777 - NULL Pointer Dereference
CVE-2022-39028
CWE-476 Medium
No
No
- 30.09.2022 SB2022093027
SB2022093028
SB2022102638
and 12 more
#VU66152 - Resource exhaustion
CVE-2021-46828
CWE-400 Medium
No
No
- 07.08.2022 SB2022080701
SB2022080703
SB2022090161
and 20 more
#VU66123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3709
CWE-79 Medium
No
No
- 05.08.2022 SB2022080507
SB2022080510
SB2022080808
and 43 more
#VU65354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31097
CWE-79 Low
No
No
- 15.07.2022 SB2022071510
SB2022102094
SB2022102641
and 16 more
#VU65353 - Improper Authentication
CVE-2022-31107
CWE-287 High
No
No
- 15.07.2022 SB2022071510
SB2022072642
SB2022072643
and 21 more
#VU62794 - Unprotected Transport of Credentials
CVE-2021-27023
CWE-523 Medium
No
No
- 04.05.2022 SB2022050414
SB2022050430
SB2022060135
and 5 more
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
- 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU50018 - NULL Pointer Dereference
CVE-2020-27842
CWE-476 Medium
No
No
- 05.01.2021 SB2020122906
SB2021012622
SB2021040622
and 14 more
#VU50019 - Out-of-bounds read
CVE-2020-27843
CWE-125 Medium
No
No
- 05.01.2021 SB2020122906
SB2021012622
SB2021040622
and 13 more
#VU49184 - Memory corruption
CVE-2020-27824
CWE-119 High
No
No
- 29.12.2020 SB2020122906
SB2020122921
SB2021040622
and 15 more
#VU49181 - Heap-based Buffer Overflow
CVE-2020-27845
CWE-122 High
No
No
- 29.12.2020 SB2020122906
SB2021012622
SB2021040622
and 14 more
#VU23114 - Out-of-bounds read
CVE-2016-9803
CWE-125 Low
No
No
- 02.12.2019 SB2016120302
SB2022103008
#VU30142 - Memory corruption
CVE-2018-21010
CWE-119 High
No
No
- 05.09.2019 SB2019090523
SB2019122638
SB2021012622
and 3 more


Showing elements 441 - 460 out of 1647