Known vulnerabilities in SUSE Linux Enterprise Server 15 SP2 LTSS - page 11

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP2 LTSS
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1474
Public exploits: 79
Known exploited (KEV): 25
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP2 LTSS SUSE Linux Enterprise Server 15 SP2 LTSS is affected by 1474 known vulnerabilities: 18 critical, 245 high, 432 medium, 779 low Critical High Medium Low

Vulnerabilities (1474)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94852 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-41671		 CWE-444 High
No
No
 - 30.07.2024 SB2024073015
SB20240805108
SB20240806193
and 11 more
#VU94851 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41810		 CWE-79 Low
No
No
 - 30.07.2024 SB2024073015
SB20240805108
SB20240806193
and 11 more
#VU94762 - Incorrect Authorization
CVE-2024-41110		 CWE-863 Medium
No
No
 - 26.07.2024 SB2024072641
SB2024080330
SB2024080739
and 39 more
#VU94711 - Resource exhaustion
CVE-2024-1975		 CWE-400 Medium
No
No
 - 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 72 more
#VU94617 - Stack-based buffer overflow
CVE-2024-40897		 CWE-121 Medium
No
No
 - 19.07.2024 SB2024071935
SB2024073040
SB2024073058
and 14 more
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94557 - Improper input validation
CVE-2024-21140		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94558 - Improper input validation
CVE-2024-21144		 CWE-20 Low
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94560 - Improper input validation
CVE-2024-21138		 CWE-20 Low
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 117 more
#VU93731 - Out-of-bounds read
CVE-2023-52169		 CWE-125 Medium
No
No
 - 03.07.2024 SB2024070344
SB2024071604
SB2024073019
and 2 more
#VU93730 - Heap-based Buffer Overflow
CVE-2023-52168		 CWE-122 High
No
No
 - 03.07.2024 SB2024070344
SB2024071604
SB2024073019
and 2 more
#VU87538 - Resource exhaustion
CVE-2024-28180		 CWE-400 Medium
No
No
 - 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU86201 - Heap-based Buffer Overflow
CVE-2024-24577		 CWE-122 High
No
No
 - 07.02.2024 SB2024020715
SB2024020801
SB2024020863
and 29 more
#VU9749 - Use After Free
CVE-2017-13797		 CWE-416 High
Available
No
 - 25.12.2017 SB2017110101
SB2024072315
#VU9038 - Memory corruption
CVE-2017-13803		 CWE-119 High
No
No
 - 01.11.2017 SB2017110101
SB2017110102
SB2017111603
and 5 more
#VU9037 - Memory corruption
CVE-2017-13802		 CWE-119 High
Available
No
 - 01.11.2017 SB2017110101
SB2017110102
SB2017111603
and 2 more
#VU9036 - Memory corruption
CVE-2017-13798		 CWE-119 High
Available
No
 - 01.11.2017 SB2017110101
SB2017110102
SB2017111603
and 5 more
#VU9086 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-12276		 CWE-89 Low
No
No
 - 01.11.2017 SB2017110208
SB2024072321


Showing elements 201 - 220 out of 1474