Known vulnerabilities in SUSE Linux Enterprise Server 12 SP4 - page 10

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12
Version: SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 477
Public exploits: 29
Known exploited (KEV): 12

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 version SP4 SUSE Linux Enterprise Server 12 SP4 is affected by 477 vulnerabilities: 7 critical, 73 high, 217 medium, 180 low Critical High Medium Low

Vulnerabilities (477)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82066 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45143		 CWE-200 Medium
No
No
 - 17.10.2023 SB2023101702
SB2023101703
SB2023101801
and 31 more
#VU80932 - Off-by-one Error
CVE-2023-4504		 CWE-193 High
No
No
 - 20.09.2023 SB2023092051
SB2023092052
SB2023092054
and 26 more
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863		 CWE-122 Critical
Public exploit available
Exploited
 - 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU80585 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41105		 CWE-22 Low
No
No
 - 11.09.2023 SB2023082825
SB2023100328
SB2023100362
and 18 more
#VU80472 - Permissions, Privileges, and Access Controls
CVE-2023-20898		 CWE-264 Low
No
No
 - 05.09.2023 SB2023090559
SB2023090563
SB2023090601
and 13 more
#VU80471 - Improper input validation
CVE-2023-20897		 CWE-20 Medium
No
No
 - 05.09.2023 SB2023090559
SB2023090563
SB2023090601
and 14 more
#VU80395 - Resource exhaustion
CVE-2023-41164		 CWE-400 Medium
No
No
 - 04.09.2023 SB2023090432
SB2023090550
SB2023091166
and 19 more
#VU79836 - Inefficient Regular Expression Complexity
CVE-2023-26112		 CWE-1333 Medium
No
No
 - 22.08.2023 SB2023082229
SB2023082230
SB2023082231
and 8 more
#VU79334 - Permissions, Privileges, and Access Controls
CVE-2023-32006		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 38 more
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU78978 - Memory corruption
CVE-2023-3824		 CWE-119 Critical
Public exploit available
Exploited
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823		 CWE-611 High
No
No
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 - 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU77641 - Use After Free
CVE-2023-34241		 CWE-416 Medium
No
No
 - 22.06.2023 SB2023062261
SB2023062272
SB2023062276
and 36 more
#VU76308 - Improper Authentication
CVE-2023-32360		 CWE-287 Medium
No
No
 - 18.05.2023 SB2023051860
SB2023051901
SB2023051902
and 36 more
#VU75789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23520		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23519		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23518		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75786 - Incorrect Regular Expression
CVE-2022-23517		 CWE-185 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 1 more
#VU46905 - Buffer overflow
CVE-2020-8927		 CWE-120 Medium
No
No
 - 15.09.2020 SB2020092215
SB2020092701
SB2020092704
and 40 more


Showing elements 181 - 200 out of 477