Known vulnerabilities in SUSE Linux Enterprise Server 15-SP3 - page 10

Vendor: SUSE
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 778
Public exploits: 23
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 15-SP3 SUSE Linux Enterprise Server 15-SP3 is affected by 778 vulnerabilities: 1 critical, 178 high, 255 medium, 344 low Critical High Medium Low

Vulnerabilities (778)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69405 - Improper input validation
CVE-2022-41716
CWE-20 Low
No
No
- 17.11.2022 SB2022111727
SB2022111728
SB2022111741
and 32 more
#VU69301 - UNIX Symbolic Link (Symlink) Following
CVE-2022-31256
CWE-61 Low
No
No
- 14.11.2022 SB2022111452
SB2022111453
#VU69290 - Incorrect Authorization
CVE-2022-2989
CWE-863 Low
No
No
- 14.11.2022 SB2022111428
SB2022111429
SB2022111430
and 14 more
#VU68886 - Out-of-bounds read
CVE-2022-31630
CWE-125 Medium
No
No
- 01.11.2022 SB2022110119
SB2022110336
SB2022110814
and 21 more
#VU68855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39348
CWE-79 Low
No
No
- 31.10.2022 SB2022103137
SB20221115106
SB2022111743
and 12 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
- 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
- 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68317 - NULL Pointer Dereference
CVE-2022-42722
CWE-476 Medium
No
No
- 14.10.2022 SB2022101416
SB2022101707
SB2022101712
and 47 more
#VU68265 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39283
CWE-200 Low
No
No
- 12.10.2022 SB2022101251
SB2022103108
SB2022111525
and 12 more
#VU68264 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39282
CWE-200 Low
No
No
- 12.10.2022 SB2022101251
SB2022103108
SB2022111525
and 12 more
#VU68110 - Permissions, Privileges, and Access Controls
CVE-2022-39189
CWE-264 Low
No
No
- 11.10.2022 SB2022101109
SB2022101111
SB2022101505
and 45 more
#VU67972 - Missing release of memory after effective lifetime
CVE-2020-29260
CWE-401 Medium
No
No
- 06.10.2022 SB2022100646
SB2022100647
SB2022111531
and 3 more
#VU67944 - Improper input validation
CVE-2022-2928
CWE-20 Low
No
No
- 05.10.2022 SB2022100544
SB2022100545
SB2022100547
and 28 more
#VU67943 - Missing release of memory after effective lifetime
CVE-2022-2929
CWE-401 Medium
No
No
- 05.10.2022 SB2022100544
SB2022100545
SB2022100547
and 26 more
#VU67555 - Incorrect Regular Expression
CVE-2022-40023
CWE-185 Medium
No
No
- 21.09.2022 SB2022092139
SB2022092141
SB2022102426
and 20 more
#VU67271 - Incorrect Default Permissions
CVE-2022-32743
CWE-276 Medium
No
No
- 13.09.2022 SB2022091372
SB2022091377
SB2022111138
and 5 more
#VU67270 - Use of Insufficiently Random Values
CVE-2022-1615
CWE-330 Low
No
No
- 13.09.2022 SB2022091371
SB2022091377
SB2022091448
and 18 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033
CWE-79 Low
No
No
- 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU61097 - Use After Free
CVE-2021-39698
CWE-416 Low
No
No
- 08.03.2022 SB2022030801
SB2022031403
SB2022061563
and 33 more
#VU15945 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10903
CWE-200 Low
No
No
- 16.11.2018 SB2018071715
SB2018111903
SB2018102518
and 3 more


Showing elements 181 - 200 out of 778