Known vulnerabilities in SUSE Linux Enterprise Server 15-SP2 - page 5

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 15-SP2

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 205

Public exploits: 17

Known exploited (KEV): 6

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (205)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68316 - Memory corruption CVE-2022-42721	CWE-119	High	No	No	-	14.10.2022	SB2022101415 SB2022101707 SB2022101712 and 49 more
#VU68314 - Use After Free CVE-2022-42720	CWE-416	High	No	No	-	14.10.2022	SB2022101413 SB2022101707 SB2022101712 and 49 more
#VU67622 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-8161	CWE-22	Medium	No	No	-	23.09.2022	SB2020070234 SB2022092345 SB2021040632 and 3 more
#VU67621 - Missing Support for Integrity Check CVE-2020-8184	CWE-353	Low	No	No	-	23.09.2022	SB2022070222 SB2022092345 SB2021040632 and 5 more
#VU67512 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2016-3695	CWE-74	Low	No	No	-	20.09.2022	SB2017122926 SB2022092046 SB2022092047 and 6 more
#VU67511 - Use After Free CVE-2020-27784	CWE-416	Low	No	No	-	20.09.2022	SB2022092043 SB2022092046 SB2022092823 and 5 more
#VU67509 - Out-of-bounds read CVE-2022-2905	CWE-125	Low	No	No	-	20.09.2022	SB2022092041 SB2022092046 SB2022092047 and 17 more
#VU67478 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2022-39188	CWE-362	Low	No	No	-	20.09.2022	SB2022092004 SB2022092006 SB2022092010 and 83 more
#VU67475 - Improper input validation CVE-2022-21385	CWE-20	Low	No	No	-	20.09.2022	SB2022092001 SB2022092006 SB2022092007 and 11 more
#VU67474 - Out-of-bounds write CVE-2022-20369	CWE-787	Low	No	No	-	20.09.2022	SB2022092006 SB2022092007 SB2022092008 and 37 more
#VU67473 - Out-of-bounds read CVE-2022-20368	CWE-125	Low	No	No	-	19.09.2022	SB2022092006 SB2022092007 SB2022092008 and 44 more
#VU66549 - Permissions, Privileges, and Access Controls CVE-2022-26373	CWE-264	Low	No	No	-	16.08.2022	SB2022081642 SB2022081647 SB2022081745 and 64 more
#VU66397 - Double Free CVE-2022-2588	CWE-415	Low	Public exploit available	Exploited	-	11.08.2022	SB2022081109 SB2022081110 SB2022081111 and 99 more
#VU64434 - Use After Free CVE-2022-1652	CWE-416	Low	No	No	-	16.06.2022	SB2022061630 SB2022061631 SB2022061632 and 47 more
#VU64079 - Missing release of memory after effective lifetime CVE-2022-1012	CWE-401	Medium	No	No	-	08.06.2022	SB2022060827 SB2022061417 SB2022062437 and 75 more
#VU63838 - Use After Free CVE-2021-4203	CWE-416	Low	No	No	-	31.05.2022	SB2022062928 SB2022062931 SB2022070643 and 42 more
#VU63496 - Improper Update of Reference Count CVE-2022-29581	CWE-911	Low	No	No	-	20.05.2022	SB2022052020 SB2022052604 SB2022052605 and 56 more
#VU63168 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-29217	CWE-327	Medium	No	No	-	13.05.2022	SB2022051319 SB2022071428 SB2022071429 and 12 more
#VU61798 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-24790	CWE-444	Medium	No	No	-	01.04.2022	SB2022040112 SB2022052603 SB2022092241 and 12 more
#VU59812 - Permissions, Privileges, and Access Controls CVE-2021-4155	CWE-264	Low	No	No	-	19.01.2022	SB2022011910 SB2022011932 SB2022011937 and 54 more

Showing elements 81 - 100 out of 205

Known vulnerabilities in SUSE Linux Enterprise Server 15-SP2 - page 5

Vulnerabilities by Severity

Vulnerabilities (205)

Please verify you're human