Known vulnerabilities in SUSE Linux Enterprise Server 12 SP4 - page 23

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12
Version: SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 466
Public exploits: 26
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 version SP4 SUSE Linux Enterprise Server 12 SP4 is affected by 466 vulnerabilities: 5 critical, 69 high, 213 medium, 179 low Critical High Medium Low

Vulnerabilities (466)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339		 CWE-78 High
No
No
 - 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU72257 - Security Features
CVE-2023-25734		 CWE-254 Medium
No
No
 - 15.02.2023 SB2023021549
SB2023021553
SB2023021644
and 10 more
#VU72256 - Out-of-bounds write
CVE-2023-25732		 CWE-787 High
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 38 more
#VU72255 - Insufficient UI Warning of Dangerous Operations
CVE-2023-25729		 CWE-357 Medium
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 39 more
#VU72252 - Type conversion
CVE-2023-25737		 CWE-704 High
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 38 more
#VU72251 - Use After Free
CVE-2023-25735		 CWE-416 High
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 39 more
#VU72250 - Out-of-bounds write
CVE-2023-0767		 CWE-787 Medium
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 84 more
#VU72249 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-25730		 CWE-451 Medium
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 39 more
#VU72248 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25728		 CWE-200 Medium
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 39 more
#VU72167 - Out-of-bounds write
CVE-2023-0568		 CWE-787 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU72166 - Use of Insufficiently Random Values
CVE-2023-0567		 CWE-330 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 23 more
#VU72165 - Improper input validation
CVE-2023-0662		 CWE-20 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 25 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71305 - Improper input validation
CVE-2022-44566		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011833
SB2023022358
SB2023022503
and 5 more
#VU69799 - Use After Free
CVE-2022-3564		 CWE-416 Low
No
No
 - 01.12.2022 SB2022120131
SB2022120150
SB2022120156
and 97 more
#VU69240 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-45063		 CWE-78 High
No
No
 - 11.11.2022 SB2022111113
SB2022112204
SB2023011810
and 11 more
#VU67055 - Integer overflow
CVE-2022-38784		 CWE-190 High
No
No
 - 07.09.2022 SB2022090713
SB2022090716
SB2022091306
and 17 more
#VU54903 - Use After Free
CVE-2021-30560		 CWE-416 High
No
No
 - 15.07.2021 SB2021071511
SB2021071607
SB2021071611
and 27 more
#VU19543 - Out-of-bounds read
CVE-2019-13283		 CWE-125 Low
No
No
 - 29.07.2019 SB2019032516
SB2023022249
SB2023022355
and 5 more
#VU86 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2015-4000		 CWE-300 Medium
Public exploit available
No
 - 04.07.2016 SB2015071003
SB2015070202
SB2015072201
and 36 more


Showing elements 441 - 460 out of 466