Known vulnerabilities in SUSE Linux Enterprise Server 15-SP3 - page 27

Vendor: SUSE
Software: SUSE Linux Enterprise Server
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 778
Public exploits: 23
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server version 15-SP3 SUSE Linux Enterprise Server 15-SP3 is affected by 778 vulnerabilities: 1 critical, 178 high, 255 medium, 344 low Critical High Medium Low

Vulnerabilities (778)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66069 - Resource exhaustion
CVE-2022-28131		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66067 - Resource exhaustion
CVE-2022-30632		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66065 - Resource exhaustion
CVE-2022-1962		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66063 - Resource exhaustion
CVE-2022-30630		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66062 - Resource exhaustion
CVE-2022-30631		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more
#VU65621 - Out-of-bounds write
CVE-2022-32792		 CWE-787 High
No
No
 - 21.07.2022 SB2022072101
SB2022072104
SB2022072105
and 21 more
#VU65620 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-32816		 CWE-451 Medium
No
No
 - 21.07.2022 SB2022072101
SB2022072105
SB2022072106
and 19 more
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Public exploit available
No
 - 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU65496 - Improper input validation
CVE-2022-21541		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU65497 - Improper input validation
CVE-2022-21540		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU65360 - Type confusion
CVE-2022-34918		 CWE-843 Low
Public exploit available
Exploited
 - 15.07.2022 SB2022071602
SB2022071820
SB2022071822
and 36 more
#VU64861 - Use After Free
CVE-2022-1679		 CWE-416 Low
No
No
 - 02.07.2022 SB2022070218
SB2022070221
SB2022070717
and 82 more
#VU64274 - Out-of-bounds read
CVE-2022-29458		 CWE-125 Medium
No
No
 - 14.06.2022 SB2022061418
SB2022061419
SB2022072842
and 29 more
#VU64134 - Permissions, Privileges, and Access Controls
CVE-2022-20141		 CWE-264 Low
No
No
 - 09.06.2022 SB2022061009
SB2022062437
SB2022062440
and 57 more
#VU63164 - Double Free
CVE-2022-28390		 CWE-415 Low
No
No
 - 13.05.2022 SB2022051312
SB2022051712
SB2022051833
and 61 more
#VU63162 - Double Free
CVE-2022-28389		 CWE-415 Low
No
No
 - 13.05.2022 SB2022051312
SB2022051712
SB2022060826
and 42 more
#VU62702 - Exposure of sensitive information to an unauthorized actor
CVE-2022-29869		 CWE-200 Medium
No
No
 - 29.04.2022 SB2022042911
SB2022060218
SB2022060832
and 10 more
#VU62601 - Memory corruption
CVE-2022-26490		 CWE-119 Low
No
No
 - 26.04.2022 SB2022042621
SB2022042622
SB2022050433
and 45 more
#VU26356 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10109		 CWE-444 Medium
No
No
 - 24.03.2020 SB2020031234
SB2020032419
SB2020043028
and 8 more


Showing elements 521 - 540 out of 778