Known vulnerabilities in SUSE Linux Enterprise Server 12 SP3 - page 7

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12
Version: SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 263
Public exploits: 17
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 version SP3 SUSE Linux Enterprise Server 12 SP3 is affected by 263 vulnerabilities: 2 critical, 21 high, 155 medium, 85 low Critical High Medium Low

Vulnerabilities (263)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83261 - Resource exhaustion
CVE-2023-44271		 CWE-400 Medium
No
No
 - 18.11.2023 SB2023111809
SB2023111810
SB2023111811
and 25 more
#VU82944 - UNIX Symbolic Link (Symlink) Following
CVE-2023-34049		 CWE-61 Low
No
No
 - 09.11.2023 SB2023110931
SB2023110932
SB2023110933
and 17 more
#VU79967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40577		 CWE-79 Low
No
No
 - 25.08.2023 SB2023082505
SB2024012403
SB2024021614
and 5 more
#VU72132 - Improper Authentication
CVE-2022-39229		 CWE-287 Low
No
No
 - 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 13 more
#VU72131 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39201		 CWE-200 Medium
No
No
 - 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 12 more
#VU72130 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31130		 CWE-200 Medium
No
No
 - 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 11 more
#VU72128 - Improper Verification of Cryptographic Signature
CVE-2022-31123		 CWE-347 Medium
No
No
 - 11.02.2023 SB2023021201
SB2023021202
SB2023021203
and 15 more
#VU69485 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39307		 CWE-200 Medium
No
No
 - 22.11.2022 SB2022112220
SB2023021202
SB2023021203
and 12 more
#VU69484 - Improper input validation
CVE-2022-39306		 CWE-20 Medium
No
No
 - 22.11.2022 SB2022112220
SB2023021202
SB2023021203
and 12 more
#VU64404 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43815		 CWE-22 Low
No
No
 - 15.06.2022 SB2021121022
SB2022062026
SB2022102094
and 8 more
#VU64402 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21673		 CWE-200 Low
No
No
 - 15.06.2022 SB2022061623
SB2022062026
SB2022081215
and 12 more
#VU64399 - Cross-Site Request Forgery (CSRF)
CVE-2022-21703		 CWE-352 Medium
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21702		 CWE-79 Low
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key
CVE-2022-21713		 CWE-639 Low
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 13 more
#VU64273 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43813		 CWE-22 Low
No
No
 - 14.06.2022 SB2022061422
SB2022062026
SB2022081215
and 16 more
#VU63461 - Improper input validation
CVE-2022-29170		 CWE-20 Low
No
No
 - 19.05.2022 SB2022051916
SB2024012352
SB2024012403
and 3 more
#VU61599 - Improper input validation
CVE-2022-21698		 CWE-20 Medium
No
No
 - 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU58647 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43798		 CWE-22 High
Public exploit available
Exploited
 - 08.12.2021 SB2021120803
SB2022062026
SB2022102094
and 7 more
#VU48373 - Exposure of sensitive information to an unauthorized actor
CVE-2020-12912		 CWE-200 Low
No
No
 - 11.11.2020 SB2020111118
SB2023120115
SB2023121950
and 4 more
#VU48371 - Improper Access Control
CVE-2020-8694		 CWE-284 Low
No
No
 - 11.11.2020 SB2020111117
SB2023120115
SB2023121950
and 9 more


Showing elements 121 - 140 out of 263