Known vulnerabilities in SUSE Linux Enterprise Server 15-LTSS - page 8

Vendor: SUSE
Version: 15-LTSS
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 1299
Public exploits: 51
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 15-LTSS SUSE Linux Enterprise Server 15-LTSS is affected by 1299 vulnerabilities: 14 critical, 321 high, 454 medium, 510 low Critical High Medium Low

Vulnerabilities (1299)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69301 - UNIX Symbolic Link (Symlink) Following
CVE-2022-31256
CWE-61 Low
No
No
- 14.11.2022 SB2022111452
SB2022111453
#VU68973 - Out-of-bounds write
CVE-2022-43995
CWE-787 Low
No
No
- 05.11.2022 SB2022110501
SB2022110502
SB2022110729
and 17 more
#VU68887 - Integer overflow
CVE-2022-37454
CWE-190 High
Public exploit available
No
- 01.11.2022 SB2022110118
SB2022110119
SB2022110209
and 69 more
#VU68829 - Resource Management Errors
CVE-2022-40304
CWE-399 Medium
No
No
- 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303
CWE-190 High
No
No
- 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU68718 - Use After Free
CVE-2022-43680
CWE-416 Medium
No
No
- 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 97 more
#VU68437 - Improper input validation
CVE-2022-21628
CWE-20 Medium
No
No
- 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626
CWE-20 Medium
No
No
- 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68439 - Improper input validation
CVE-2022-21618
CWE-20 Medium
No
No
- 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 60 more
#VU68440 - Improper input validation
CVE-2022-39399
CWE-20 Low
No
No
- 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 61 more
#VU68441 - Improper input validation
CVE-2022-21624
CWE-20 Low
No
No
- 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68442 - Improper input validation
CVE-2022-21619
CWE-20 Low
No
No
- 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU67760 - Type conversion
CVE-2020-10735
CWE-704 Medium
No
No
- 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU66123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3709
CWE-79 Medium
No
No
- 05.08.2022 SB2022080507
SB2022080510
SB2022080808
and 43 more
#VU63711 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-1664
CWE-22 Medium
No
No
- 26.05.2022 SB2022052610
SB2022052613
SB2022052622
and 9 more
#VU63627 - Memory corruption
CVE-2021-36690
CWE-119 Low
No
No
- 25.05.2022 SB2022050533
SB2022071831
SB2022092034
and 16 more
#VU50018 - NULL Pointer Dereference
CVE-2020-27842
CWE-476 Medium
No
No
- 05.01.2021 SB2020122906
SB2021012622
SB2021040622
and 14 more
#VU50019 - Out-of-bounds read
CVE-2020-27843
CWE-125 Medium
No
No
- 05.01.2021 SB2020122906
SB2021012622
SB2021040622
and 13 more
#VU49184 - Memory corruption
CVE-2020-27824
CWE-119 High
No
No
- 29.12.2020 SB2020122906
SB2020122921
SB2021040622
and 15 more
#VU49181 - Heap-based Buffer Overflow
CVE-2020-27845
CWE-122 High
No
No
- 29.12.2020 SB2020122906
SB2021012622
SB2021040622
and 14 more


Showing elements 141 - 160 out of 1299