Known vulnerabilities in SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 - page 63

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP2 LTSS
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1474
Public exploits: 79
Known exploited (KEV): 25
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP2 LTSS version 15-SP2 SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 is affected by 1474 vulnerabilities: 18 critical, 245 high, 432 medium, 779 low Critical High Medium Low

Vulnerabilities (1474)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76489 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-32700		 CWE-78 High
No
No
 - 25.05.2023 SB2023052503
SB2023052504
SB2023052505
and 13 more
#VU76422 - Improper input validation
CVE-2023-32067		 CWE-20 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more
#VU76383 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-24805		 CWE-78 Medium
No
No
 - 19.05.2023 SB2023051940
SB2023051946
SB2023051947
and 20 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322		 CWE-440 Medium
No
No
 - 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321		 CWE-295 Medium
No
No
 - 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU76235 - Improper Synchronization
CVE-2023-28320		 CWE-662 Low
No
No
 - 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 28 more
#VU76042 - Security Features
CVE-2023-2455		 CWE-254 Low
No
No
 - 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 61 more
#VU76041 - Permissions, Privileges, and Access Controls
CVE-2023-2454		 CWE-264 Medium
No
No
 - 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 55 more
#VU75874 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-32205		 CWE-451 Medium
No
No
 - 09.05.2023 SB2023050974
SB20230509129
SB2023051067
and 37 more
#VU75664 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30861		 CWE-200 Medium
No
No
 - 02.05.2023 SB2023050221
SB2023052227
SB2023052228
and 44 more
#VU75432 - Permissions, Privileges, and Access Controls
CVE-2023-30630		 CWE-264 Low
No
No
 - 24.04.2023 SB2023042410
SB2023042412
SB2023042642
and 51 more
#VU74579 - Improper input validation
CVE-2023-1668		 CWE-20 Medium
No
No
 - 06.04.2023 SB2023040683
SB2023041403
SB2023041414
and 15 more
#VU73726 - Improper input validation
CVE-2023-27530		 CWE-20 Medium
No
No
 - 15.03.2023 SB2023031545
SB2023031551
SB2023042535
and 18 more
#VU73274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28120		 CWE-79 Medium
No
No
 - 14.03.2023 SB2023031410
SB2023041501
SB2023042648
and 13 more
#VU72477 - Incorrect Calculation
CVE-2022-33972		 CWE-682 Low
No
No
 - 21.02.2023 SB2023022189
SB2023022190
SB2023022707
and 21 more
#VU70471 - Out-of-bounds read
CVE-2022-4337		 CWE-125 Medium
No
No
 - 21.12.2022 SB2022122109
SB2023011401
SB2023020902
and 18 more
#VU70459 - Integer underflow
CVE-2022-4338		 CWE-191 High
No
No
 - 21.12.2022 SB2022122109
SB2023011401
SB2023020902
and 21 more
#VU69691 - Use of Password Hash Instead of Password for Authentication
CVE-2022-46146		 CWE-836 Low
No
No
 - 29.11.2022 SB2022112926
SB2022113012
SB2023022044
and 33 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 - 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191		 CWE-327 Medium
No
No
 - 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more


Showing elements 1241 - 1260 out of 1474