Known vulnerabilities in SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 - page 81

Vendor: SUSE
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp3_ltss:*:*:*:*:*:*:*:*
Total vulnerabilities: 1714
Public exploits: 87
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP3 LTSS version 15-SP3 SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 is affected by 1714 vulnerabilities: 18 critical, 248 high, 474 medium, 974 low Critical High Medium Low

Vulnerabilities (1714)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74497 - Memory corruption
CVE-2023-26769
CWE-119 Low
No
No
- 05.04.2023 SB2023030648
SB2023040556
SB2023040557
and 9 more
#VU74206 - Configuration
CWE-16 Low
No
No
- 30.03.2023 SB2023033047
#VU74202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-4065
CWE-22 High
No
No
- 30.03.2023 SB2023033036
SB2023033043
SB2023102718
and 4 more
#VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28487
CWE-78 Low
No
No
- 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 28 more
#VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28486
CWE-78 Low
No
No
- 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 31 more
#VU74180 - Use After Free
CVE-2023-1393
CWE-416 Low
No
No
- 29.03.2023 SB2023032954
SB2023032961
SB2023032962
and 41 more
#VU74179 - Improper Access Control
CVE-2023-0614
CWE-284 Medium
No
No
- 29.03.2023 SB2023032949
SB2023032950
SB2023032969
and 14 more
#VU74178 - Permissions, Privileges, and Access Controls
CVE-2023-0225
CWE-264 Low
No
No
- 29.03.2023 SB2023032949
SB2023032950
SB2023032969
and 8 more
#VU74177 - Cleartext Transmission of Sensitive Information
CVE-2023-0922
CWE-319 Low
No
No
- 29.03.2023 SB2023032949
SB2023032950
SB2023032951
and 18 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708
CWE-614 Low
No
No
- 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU73835 - Improper input validation
CVE-2023-28100
CWE-20 Low
No
No
- 20.03.2023 SB2023032035
SB2023033142
SB2023033143
and 15 more
#VU73834 - Improper input validation
CVE-2023-28101
CWE-20 Medium
No
No
- 20.03.2023 SB2023032035
SB2023033142
SB2023033143
and 15 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690
CWE-113 Medium
Public exploit available
No
- 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72339 - Resource exhaustion
CVE-2023-25577
CWE-400 Medium
No
No
- 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU71585 - Out-of-bounds write
CVE-2022-40151
CWE-787 Medium
No
No
- 26.01.2023 SB2023012653
SB2023032944
SB2023041866
and 5 more
#VU70527 - Improper input validation
CVE-2022-41966
CWE-20 Medium
Public exploit available
No
- 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70039 - Resource exhaustion
CVE-2022-23471
CWE-400 Medium
No
No
- 08.12.2022 SB2022120802
SB2022121324
SB2022122112
and 27 more
#VU69283 - Out-of-bounds write
CVE-2022-40151
CWE-787 Medium
No
No
- 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more
#VU65827 - Use After Free
CVE-2022-32746
CWE-416 Low
No
No
- 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 30 more
#VU64067 - Out-of-bounds write
CVE-2022-28737
CWE-787 Low
No
No
- 08.06.2022 SB2022060810
SB2022061652
SB2022061653
and 24 more


Showing elements 1601 - 1620 out of 1714