Known vulnerabilities in SUSE Linux Enterprise Server 12 SP4 - page 9

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12
Version: SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 466
Public exploits: 26
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 version SP4 SUSE Linux Enterprise Server 12 SP4 is affected by 466 vulnerabilities: 5 critical, 69 high, 213 medium, 179 low Critical High Medium Low

Vulnerabilities (466)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79836 - Inefficient Regular Expression Complexity
CVE-2023-26112		 CWE-1333 Medium
No
No
 - 22.08.2023 SB2023082229
SB2023082230
SB2023082231
and 8 more
#VU79335 - Permissions, Privileges, and Access Controls
CVE-2023-32559		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 39 more
#VU79334 - Permissions, Privileges, and Access Controls
CVE-2023-32006		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 38 more
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU78978 - Memory corruption
CVE-2023-3824		 CWE-119 Critical
Public exploit available
Exploited
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823		 CWE-611 High
No
No
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU78844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-37464		 CWE-327 Medium
No
No
 - 01.08.2023 SB2023080146
SB2023080147
SB2023080164
and 14 more
#VU78577 - Out-of-bounds read
CVE-2022-2127		 CWE-125 Medium
No
No
 - 24.07.2023 SB2023072430
SB2023072432
SB2023072433
and 34 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 - 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU78067 - Use After Free
CVE-2023-3600		 CWE-416 High
No
No
 - 11.07.2023 SB2023071154
SB2023071240
SB2023072136
and 31 more
#VU77880 - Inefficient Regular Expression Complexity
CVE-2023-36053		 CWE-1333 Medium
No
No
 - 03.07.2023 SB2023070325
SB2023070532
SB2023071502
and 16 more
#VU77734 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28362		 CWE-79 Low
No
No
 - 27.06.2023 SB2023062718
SB2023080864
SB2023080948
and 3 more
#VU75789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23520		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23519		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23518		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75786 - Incorrect Regular Expression
CVE-2022-23517		 CWE-185 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 1 more
#VU74469 - Unprotected Alternate Channel
CVE-2023-28842		 CWE-420 Medium
No
No
 - 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 19 more
#VU74468 - Unprotected Alternate Channel
CVE-2023-28840		 CWE-420 Medium
No
No
 - 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 20 more
#VU74467 - Missing Encryption of Sensitive Data
CVE-2023-28841		 CWE-311 Medium
No
No
 - 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 18 more
#VU66024 - Memory corruption
CVE-2022-32084		 CWE-119 Low
No
No
 - 03.08.2022 SB2022080403
SB2022080424
SB2022081650
and 35 more


Showing elements 161 - 180 out of 466