Known vulnerabilities in SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 - page 54

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP2 LTSS
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1474
Public exploits: 79
Known exploited (KEV): 25
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP2 LTSS version 15-SP2 SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 is affected by 1474 vulnerabilities: 18 critical, 245 high, 432 medium, 779 low Critical High Medium Low

Vulnerabilities (1474)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80188 - Cryptographic Issues
CVE-2023-20900		 CWE-310 Medium
No
No
 - 31.08.2023 SB2023083119
SB2023083154
SB2023083155
and 38 more
#VU79633 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-20197		 CWE-835 Medium
No
No
 - 16.08.2023 SB20230816163
SB20230821217
SB20230821218
and 21 more
#VU79335 - Permissions, Privileges, and Access Controls
CVE-2023-32559		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 39 more
#VU79334 - Permissions, Privileges, and Access Controls
CVE-2023-32006		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 38 more
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU79263 - Exposure of sensitive information to an unauthorized actor
CVE-2023-20569		 CWE-200 Low
No
No
 - 08.08.2023 SB20230808145
SB20230808146
SB2023080902
and 86 more
#VU78978 - Memory corruption
CVE-2023-3824		 CWE-119 Critical
Public exploit available
Exploited
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823		 CWE-611 High
No
No
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 - 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU78410 - Improper input validation
CVE-2023-22041		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 60 more
#VU78412 - Improper input validation
CVE-2023-22044		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 30 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU78415 - Improper input validation
CVE-2023-22036		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 65 more
#VU78416 - Improper input validation
CVE-2023-22006		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 67 more
#VU77606 - Inconsistency Between Implementation and Documented Design
CVE-2023-30590		 CWE-1068 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-30589		 CWE-444 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 43 more
#VU77586 - Permissions, Privileges, and Access Controls
CVE-2023-30581		 CWE-264 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 31 more
#VU72398 - Permissions, Privileges, and Access Controls
CVE-2023-23918		 CWE-264 Medium
No
No
 - 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 48 more
#VU72050 - Improper input validation
CVE-2023-25193		 CWE-20 Medium
No
No
 - 08.02.2023 SB2023020843
SB2023041464
SB2023060525
and 80 more


Showing elements 1061 - 1080 out of 1474