Known vulnerabilities in SUSE Linux Enterprise Server 15-SP2-BCL - page 4

Vendor: SUSE
Version: 15-SP2-BCL
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 970
Public exploits: 36
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-BCL is affected by 970 vulnerabilities: 7 critical, 251 high, 322 medium, 390 low Critical High Medium Low

Vulnerabilities (970)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70437 - Out-of-bounds read
CVE-2022-46344
CWE-125 Low
No
No
- 20.12.2022 SB2022122002
SB2022122003
SB2022122004
and 39 more
#VU70436 - Use After Free
CVE-2022-46343
CWE-416 Low
No
No
- 20.12.2022 SB2022122002
SB2022122003
SB2022122004
and 39 more
#VU70435 - Use After Free
CVE-2022-46342
CWE-416 Low
No
No
- 20.12.2022 SB2022122002
SB2022122003
SB2022122004
and 39 more
#VU70152 - Use After Free
CVE-2022-46882
CWE-416 High
No
No
- 13.12.2022 SB2022121330
SB2022121331
SB2022121453
and 33 more
#VU70151 - Memory corruption
CVE-2022-46881
CWE-119 High
No
No
- 13.12.2022 SB2022121330
SB2022121331
SB2022121453
and 33 more
#VU70150 - Use After Free
CVE-2022-46880
CWE-416 High
No
No
- 13.12.2022 SB2022121330
SB2022121331
SB2022121453
and 33 more
#VU70149 - Memory corruption
CVE-2022-46878
CWE-119 High
No
No
- 13.12.2022 SB2022121330
SB2022121331
SB2022121453
and 36 more
#VU70148 - Insufficient UI Warning of Dangerous Operations
CVE-2022-46875
CWE-357 Medium
Public exploit available
No
- 13.12.2022 SB2022121330
SB2022121331
SB2022121453
and 8 more
#VU70147 - Improper input validation
CVE-2022-46874
CWE-20 Medium
No
No
- 13.12.2022 SB2022121330
SB2022121453
SB2022121454
and 39 more
#VU70146 - Security Features
CVE-2022-46872
CWE-254 Medium
No
No
- 13.12.2022 SB2022121330
SB2022121331
SB2022121453
and 36 more
#VU70039 - Resource exhaustion
CVE-2022-23471
CWE-400 Medium
No
No
- 08.12.2022 SB2022120802
SB2022121324
SB2022122112
and 27 more
#VU69808 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-45939
CWE-78 High
No
No
- 01.12.2022 SB2022120142
SB2022120148
SB2022120149
and 23 more
#VU69761 - Resource exhaustion
CVE-2018-17581
CWE-400 Medium
No
No
- 30.11.2022 SB2019030713
SB2022113031
SB2022113034
#VU69760 - Uncaught Exception
CVE-2017-11591
CWE-248 Medium
No
No
- 30.11.2022 SB2019030713
SB2022113031
SB2022113034
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548
CWE-350 Medium
No
No
- 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU19510 - Integer overflow
CVE-2019-13109
CWE-190 Low
No
No
- 28.07.2019 SB2019081904
SB2019081381
SB2022113031
and 3 more
#VU36299 - Memory corruption
CVE-2018-20097
CWE-119 Medium
No
No
- 12.12.2018 SB2018121217
SB2022112854
SB2022113031
and 2 more
#VU36300 - Out-of-bounds read
CVE-2018-20098
CWE-125 Medium
No
No
- 12.12.2018 SB2018110305
SB2022113031
SB2022113034
and 1 more
#VU36301 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-20099
CWE-835 Medium
No
No
- 12.12.2018 SB2018110305
SB2022113031
SB2022113034
and 1 more
#VU13576 - Heap-based Buffer Overflow
CVE-2018-11531
CWE-122 Low
No
No
- 05.07.2018 SB2018070502
SB2018070503
SB2018112607
and 2 more


Showing elements 61 - 80 out of 970