Known vulnerabilities in SUSE Linux Enterprise Server 15 SP3 - page 137

Vendor: SUSE
Version: SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15:*:*:*:*:*:*:*:*
Total vulnerabilities: 3094
Public exploits: 139
Known exploited (KEV): 39
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 version SP3 SUSE Linux Enterprise Server 15 SP3 is affected by 3094 vulnerabilities: 26 critical, 423 high, 797 medium, 1847 low Critical High Medium Low

Vulnerabilities (3094)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201
CWE-90 Medium
No
No
- 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77962 - Resource exhaustion
CVE-2018-1000518
CWE-400 Medium
No
No
- 05.07.2023 SB2018062630
SB2023070510
SB2023092027
and 3 more
#VU77939 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-36664
CWE-78 High
Public exploit available
No
- 04.07.2023 SB2023070430
SB2023070432
SB2023071037
and 18 more
#VU77910 - Improper input validation
CVE-2016-7069
CWE-20 Medium
No
No
- 03.07.2023 SB2018091117
SB2023070341
SB2023070438
and 4 more
#VU77909 - Improper input validation
CVE-2018-14663
CWE-20 Low
No
No
- 03.07.2023 SB2018112748
SB2023070341
SB2023070438
and 4 more
#VU77606 - Inconsistency Between Implementation and Documented Design
CVE-2023-30590
CWE-1068 Medium
No
No
- 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-30589
CWE-444 Medium
No
No
- 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 43 more
#VU77604 - Improper input validation
CVE-2023-30588
CWE-20 Medium
No
No
- 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU76098 - Out-of-bounds write
CVE-2023-31436
CWE-787 Low
No
No
- 14.05.2023 SB2023051401
SB2023051402
SB2023052414
and 110 more
#VU74631 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-1390
CWE-835 Medium
No
No
- 10.04.2023 SB2023041035
SB2023041039
SB2023041040
and 40 more
#VU74628 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-28466
CWE-362 Low
No
No
- 10.04.2023 SB2023041032
SB2023041040
SB2023041041
and 79 more
#VU74053 - Double Free
CVE-2022-4744
CWE-415 Low
No
No
- 27.03.2023 SB2023032732
SB2023032734
SB2023032735
and 52 more
#VU71477 - Type confusion
CVE-2023-23455
CWE-843 Low
No
No
- 24.01.2023 SB2023012442
SB2023012450
SB2023012651
and 86 more
#VU71261 - Improper input validation
CVE-2022-1941
CWE-20 Medium
No
No
- 17.01.2023 SB2023011780
SB2023011801
SB2023011802
and 24 more
#VU70528 - Security Features
CVE-2022-46908
CWE-254 Low
No
No
- 28.12.2022 SB2022122824
SB2022122826
SB2022122827
and 24 more
#VU69293 - Improper input validation
CVE-2022-3171
CWE-20 Medium
No
No
- 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU64838 - Information Exposure Through Log Files
CVE-2022-2084
CWE-532 Low
No
No
- 30.06.2022 SB2022063026
SB2023062401
SB2023051967
and 3 more
#VU62403 - Improper input validation
CVE-2021-22570
CWE-20 Medium
No
No
- 19.04.2022 SB2022041949
SB2022062233
SB2022100638
and 34 more
#VU60181 - Resource Management Errors
CVE-2021-22569
CWE-399 Medium
Public exploit available
No
- 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU38443 - Cross-Site Request Forgery (CSRF)
CVE-2017-7557
CWE-352 High
No
No
- 22.08.2017 SB2017082211
SB2023070341
SB2023070438
and 4 more


Showing elements 2721 - 2740 out of 3094