Known vulnerabilities in SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security - page 137

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12 SP5 LTSS Extended
Version: Security
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12_sp5_ltss_extended:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3016
Public exploits: 56
Known exploited (KEV): 26
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 SP5 LTSS Extended version Security SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security is affected by 3016 vulnerabilities: 13 critical, 340 high, 534 medium, 2129 low Critical High Medium Low

Vulnerabilities (3016)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150		 CWE-330 Medium
No
No
 - 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 26 more
#VU103225 - Missing release of memory after effective lifetime
CVE-2025-23085		 CWE-401 Medium
No
No
 - 22.01.2025 SB2025012252
SB2025012439
SB2025012440
and 29 more
#VU103159 - Improper input validation
CVE-2025-21502		 CWE-20 Medium
No
No
 - 21.01.2025 SB2025012221
SB2025012222
SB2025012223
and 44 more
#VU102977 - Memory corruption
CVE-2024-57888		 CWE-119 Low
No
No
 - 17.01.2025 SB20250117136
SB2025020348
SB2025020351
and 25 more
#VU102918 - Out-of-bounds read
CVE-2024-57893		 CWE-125 Low
No
No
 - 17.01.2025 SB2025011760
SB2025020348
SB2025020351
and 40 more
#VU102907 - Use After Free
CVE-2024-57887		 CWE-416 Low
No
No
 - 17.01.2025 SB2025011749
SB2025020348
SB2025020351
and 26 more
#VU102905 - Use After Free
CVE-2024-57892		 CWE-416 Low
No
No
 - 17.01.2025 SB2025011747
SB2025020348
SB2025020351
and 50 more
#VU102870 - Improper Encoding or Escaping of Output
CVE-2024-50349		 CWE-116 Low
No
No
 - 16.01.2025 SB2025011640
SB2025011641
SB2025011643
and 21 more
#VU102869 - Improper Encoding or Escaping of Output
CVE-2024-52006		 CWE-116 Low
No
No
 - 16.01.2025 SB2025011640
SB2025011641
SB2025011643
and 21 more
#VU102855 - Improper Authentication
CVE-2025-23013		 CWE-287 Low
No
No
 - 16.01.2025 SB2025011615
SB2025011616
SB2025011617
and 11 more
#VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-12747		 CWE-362 Low
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 56 more
#VU102296 - Memory corruption
CVE-2020-6923		 CWE-119 Medium
No
No
 - 03.01.2025 SB20200930117
SB2025010317
SB2025010318
and 6 more
#VU97659 - Incorrect Default Permissions
CVE-2024-46544		 CWE-276 Low
No
No
 - 24.09.2024 SB2024092404
SB2024100855
SB2024110627
and 6 more
#VU97651 - Improper Access Control
CVE-2024-8805		 CWE-284 High
No
No
 - 23.09.2024 SB2024092347
SB20250115100
SB2025011731
and 51 more
#VU94879 - Out-of-bounds read
CVE-2024-40779		 CWE-125 Medium
No
No
 - 30.07.2024 SB2024073047
SB2024073048
SB2024073059
and 31 more
#VU91288 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32465		 CWE-94 High
No
No
 - 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91287 - UNIX Symbolic Link (Symlink) Following
CVE-2024-32021		 CWE-61 Medium
No
No
 - 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91286 - UNIX Hard Link
CVE-2024-32020		 CWE-62 Medium
No
No
 - 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 43 more
#VU89491 - Unrestricted Upload of File with Dangerous Type
CVE-2024-32002		 CWE-434 High
Public exploit available
No
 - 15.05.2024 SB2024051504
SB2024060720
SB2024060721
and 52 more
#VU89490 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32004		 CWE-94 High
No
No
 - 15.05.2024 SB2024051503
SB2024060720
SB2024060721
and 51 more


Showing elements 2721 - 2740 out of 3016