Known vulnerabilities in SUSE Linux Enterprise Server 15-SP1 - page 4

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 15-SP1

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 168

Public exploits: 9

Known exploited (KEV): 4

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (168)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU67622 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-8161	CWE-22	Medium	No	No	-	23.09.2022	SB2020070234 SB2022092345 SB2021040632 and 3 more
#VU67621 - Missing Support for Integrity Check CVE-2020-8184	CWE-353	Low	No	No	-	23.09.2022	SB2022070222 SB2022092345 SB2021040632 and 5 more
#VU67510 - Improper input validation CVE-2022-2663	CWE-20	Medium	No	No	-	20.09.2022	SB2022092042 SB2022092046 SB2022092047 and 74 more
#VU67479 - Use After Free CVE-2022-2977	CWE-416	Low	No	No	-	20.09.2022	SB2022092005 SB2022092007 SB2022092008 and 25 more
#VU67478 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2022-39188	CWE-362	Low	No	No	-	20.09.2022	SB2022092004 SB2022092006 SB2022092010 and 83 more
#VU67477 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2022-3028	CWE-362	Low	No	No	-	20.09.2022	SB2022092003 SB2022092006 SB2022092007 and 63 more
#VU67475 - Improper input validation CVE-2022-21385	CWE-20	Low	No	No	-	20.09.2022	SB2022092001 SB2022092006 SB2022092007 and 11 more
#VU67474 - Out-of-bounds write CVE-2022-20369	CWE-787	Low	No	No	-	20.09.2022	SB2022092006 SB2022092007 SB2022092008 and 37 more
#VU67473 - Out-of-bounds read CVE-2022-20368	CWE-125	Low	No	No	-	19.09.2022	SB2022092006 SB2022092007 SB2022092008 and 44 more
#VU66812 - Integer underflow CVE-2022-2639	CWE-191	Low	Public exploit available	No	-	29.08.2022	SB2022082924 SB2022082925 SB2022082926 and 51 more
#VU66811 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-36516	CWE-327	Medium	No	No	-	29.08.2022	SB2022022601 SB2022082925 SB2022082926 and 40 more
#VU66550 - Resource Management Errors CVE-2022-36879	CWE-399	Low	No	No	-	16.08.2022	SB2022081643 SB2022081647 SB2022082923 and 47 more
#VU66549 - Permissions, Privileges, and Access Controls CVE-2022-26373	CWE-264	Low	No	No	-	16.08.2022	SB2022081642 SB2022081647 SB2022081745 and 64 more
#VU66397 - Double Free CVE-2022-2588	CWE-415	Low	Public exploit available	Exploited	-	11.08.2022	SB2022081109 SB2022081110 SB2022081111 and 99 more
#VU64434 - Use After Free CVE-2022-1652	CWE-416	Low	No	No	-	16.06.2022	SB2022061630 SB2022061631 SB2022061632 and 47 more
#VU64079 - Missing release of memory after effective lifetime CVE-2022-1012	CWE-401	Medium	No	No	-	08.06.2022	SB2022060827 SB2022061417 SB2022062437 and 75 more
#VU63838 - Use After Free CVE-2021-4203	CWE-416	Low	No	No	-	31.05.2022	SB2022062928 SB2022062931 SB2022070643 and 42 more
#VU63496 - Improper Update of Reference Count CVE-2022-29581	CWE-911	Low	No	No	-	20.05.2022	SB2022052020 SB2022052604 SB2022052605 and 56 more
#VU61798 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-24790	CWE-444	Medium	No	No	-	01.04.2022	SB2022040112 SB2022052603 SB2022092241 and 12 more
#VU31897 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2020-14001	CWE-74	High	No	No	-	27.07.2020	SB2020072739 SB2020081409 SB2020061736 and 8 more

Showing elements 61 - 80 out of 168

Known vulnerabilities in SUSE Linux Enterprise Server 15-SP1 - page 4

Vulnerabilities by Severity

Vulnerabilities (168)

Please verify you're human