Known vulnerabilities in SUSE Linux Enterprise Server 12 SP1 - page 11

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12
Version: SP1
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 219
Public exploits: 15
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 version SP1 SUSE Linux Enterprise Server 12 SP1 is affected by 219 vulnerabilities: 1 critical, 14 high, 129 medium, 75 low Critical High Medium Low

Vulnerabilities (219)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73108 - Covert Timing Channel
CVE-2020-25658		 CWE-385 Low
No
No
 - 07.03.2023 SB2020111232
SB2023030749
SB2022111045
and 7 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 - 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72618 - Improper input validation
CVE-2023-24329		 CWE-20 Medium
No
No
 - 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU72404 - Incorrect Regular Expression
CVE-2023-24807		 CWE-185 Medium
No
No
 - 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 34 more
#VU72403 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-23936		 CWE-113 Medium
No
No
 - 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 35 more
#VU72400 - Permissions, Privileges, and Access Controls
CVE-2023-23920		 CWE-264 Low
No
No
 - 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 55 more
#VU72399 - Resource Management Errors
CVE-2023-23919		 CWE-399 Medium
No
No
 - 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 33 more
#VU72398 - Permissions, Privileges, and Access Controls
CVE-2023-23918		 CWE-264 Medium
No
No
 - 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 48 more
#VU72167 - Out-of-bounds write
CVE-2023-0568		 CWE-787 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU72166 - Use of Insufficiently Random Values
CVE-2023-0567		 CWE-330 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 23 more
#VU72165 - Improper input validation
CVE-2023-0662		 CWE-20 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 25 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71642 - Incorrect Regular Expression
CVE-2022-42969		 CWE-185 Medium
No
No
 - 30.01.2023 SB2023013033
SB2023013037
SB2023021338
and 11 more
#VU71567 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23552		 CWE-79 Low
No
No
 - 26.01.2023 SB2023012632
SB2023032032
SB2023032033
and 10 more
#VU71566 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-39324		 CWE-451 Low
No
No
 - 26.01.2023 SB2023012631
SB2023032032
SB2023032033
and 12 more
#VU71137 - Incorrect Regular Expression
CVE-2022-40899		 CWE-185 Medium
No
No
 - 12.01.2023 SB2023011234
SB2023011239
SB2023011240
and 25 more
#VU70039 - Resource exhaustion
CVE-2022-23471		 CWE-400 Medium
No
No
 - 08.12.2022 SB2022120802
SB2022121324
SB2022122112
and 27 more
#VU62036 - Unchecked Return Value
CVE-2022-23806		 CWE-252 Medium
No
No
 - 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU57579 - Memory corruption
CVE-2021-38297		 CWE-119 High
Public exploit available
No
 - 21.10.2021 SB2021102121
SB2021122801
SB2021102022
and 23 more


Showing elements 201 - 220 out of 219