Known vulnerabilities in SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 - page 56

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP4 LTSS
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1271
Public exploits: 40
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP4 LTSS version 15-SP4 SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 is affected by 1271 vulnerabilities: 6 critical, 109 high, 231 medium, 925 low Critical High Medium Low

Vulnerabilities (1271)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88229 - Insufficiently Protected Credentials
CVE-2019-15052		 CWE-522 Low
No
No
 - 09.04.2024 SB2019081463
SB2024040942
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 - 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87906 - Improper input validation
CVE-2024-28085		 CWE-20 Low
Public exploit available
No
 - 28.03.2024 SB2024032835
SB2024032836
SB2024032901
and 22 more
#VU87680 - Uncontrolled Recursion
CVE-2024-25111		 CWE-674 Medium
No
No
 - 20.03.2024 SB2024032067
SB2024032078
SB2024032634
and 24 more
#VU87495 - Protection Mechanism Failure
CVE-2023-39368		 CWE-693 Medium
No
No
 - 13.03.2024 SB2024031327
SB2024031439
SB2024032236
and 6 more
#VU87490 - Exposure of sensitive information to an unauthorized actor
CVE-2023-38575		 CWE-200 Low
No
No
 - 13.03.2024 SB2024031315
SB2024031439
SB2024032236
and 6 more
#VU87461 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43490		 CWE-200 Low
No
No
 - 12.03.2024 SB20240312348
SB2024040830
SB2024080107
#VU87459 - Security Features
CVE-2023-22655		 CWE-254 Low
No
No
 - 12.03.2024 SB20240312346
SB2024040830
SB2024080107
and 8 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 - 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 74 more
#VU87201 - Improper input validation
CVE-2024-24784		 CWE-20 Medium
No
No
 - 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 - 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289		 CWE-200 Low
No
No
 - 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 - 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 - 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86885 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48624		 CWE-78 Medium
No
No
 - 28.02.2024 SB2024022820
SB2024022839
SB2024030503
and 60 more
#VU86808 - Resource exhaustion
CVE-2024-22201		 CWE-400 Medium
No
No
 - 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU86768 - Improper Authentication
CVE-2023-52160		 CWE-287 Medium
Public exploit available
No
 - 23.02.2024 SB2024022343
SB2024022345
SB2024022346
and 11 more
#VU86547 - Improper input validation
CVE-2024-25617		 CWE-20 Medium
No
No
 - 15.02.2024 SB2024021536
SB2024030157
SB2024030601
and 20 more
#VU85764 - Improper Authentication
CVE-2023-42465		 CWE-287 Low
No
No
 - 24.01.2024 SB2024012432
SB2024012434
SB2024012435
and 32 more
#VU63478 - Insecure Temporary File
CVE-2021-29429		 CWE-377 Low
No
No
 - 20.05.2022 SB2021041388
SB2024040942


Showing elements 1101 - 1120 out of 1271