Known vulnerabilities in SUSE Linux Enterprise Server 15 SP2 LTSS - page 70

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP2 LTSS
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1474
Public exploits: 79
Known exploited (KEV): 25
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP2 LTSS SUSE Linux Enterprise Server 15 SP2 LTSS is affected by 1474 known vulnerabilities: 18 critical, 245 high, 432 medium, 779 low Critical High Medium Low

Vulnerabilities (1474)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28487		 CWE-78 Low
No
No
 - 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 28 more
#VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28486		 CWE-78 Low
No
No
 - 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 31 more
#VU74180 - Use After Free
CVE-2023-1393		 CWE-416 Low
No
No
 - 29.03.2023 SB2023032954
SB2023032961
SB2023032962
and 41 more
#VU74177 - Cleartext Transmission of Sensitive Information
CVE-2023-0922		 CWE-319 Low
No
No
 - 29.03.2023 SB2023032949
SB2023032950
SB2023032951
and 18 more
#VU74059 - Configuration
 CWE-16 Low
No
No
 - 27.03.2023 SB2023032756
#VU73903 - Configuration
 CWE-16 Low
No
No
 - 21.03.2023 SB2023032167
#VU73722 - Resource exhaustion
CVE-2022-41725		 CWE-400 Medium
No
No
 - 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU73264 - Incorrect Calculation
CVE-2023-24532		 CWE-682 High
No
No
 - 13.03.2023 SB2023031318
SB2023031319
SB2023031537
and 43 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-27522		 CWE-113 Medium
No
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 33 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 - 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72685 - Resource Management Errors
CVE-2022-41724		 CWE-399 Medium
No
No
 - 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU72339 - Resource exhaustion
CVE-2023-25577		 CWE-400 Medium
No
No
 - 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU71585 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 - 26.01.2023 SB2023012653
SB2023032944
SB2023041866
and 5 more
#VU71136 - Out-of-bounds read
CVE-2022-4144		 CWE-125 Medium
No
No
 - 12.01.2023 SB2023011233
SB2023011254
SB20230118102
and 12 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 - 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41720		 CWE-22 Medium
No
No
 - 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 13 more
#VU70039 - Resource exhaustion
CVE-2022-23471		 CWE-400 Medium
No
No
 - 08.12.2022 SB2022120802
SB2022121324
SB2022122112
and 27 more
#VU69283 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 - 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more
#VU64569 - Heap-based Buffer Overflow
CVE-2021-3507		 CWE-122 Medium
No
No
 - 21.06.2022 SB2021050640
SB2022062124
SB2022102676
and 9 more


Showing elements 1381 - 1400 out of 1474