Known vulnerabilities in SUSE Linux Enterprise Server 15 SP4 LTSS - page 2

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP4 LTSS
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4_ltss:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1271
Public exploits: 40
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP4 LTSS SUSE Linux Enterprise Server 15 SP4 LTSS is affected by 1271 known vulnerabilities: 6 critical, 109 high, 231 medium, 925 low Critical High Medium Low

Vulnerabilities (1271)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99623 - Resource exhaustion
CVE-2024-49769		 CWE-400 Medium
No
No
 - 01.11.2024 SB2024110154
SB20241101104
SB2024110713
and 24 more
#VU99613 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-49768		 CWE-444 Medium
No
No
 - 01.11.2024 SB2024110154
SB2024110156
SB2024110157
and 23 more
#VU99490 - Memory corruption
CVE-2024-10467		 CWE-119 High
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99489 - Resource Management Errors
CVE-2024-10466		 CWE-399 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99488 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10465		 CWE-357 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99487 - Resource Management Errors
CVE-2024-10464		 CWE-399 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99486 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-10462		 CWE-451 Medium
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10461		 CWE-79 Medium
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99484 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10460		 CWE-357 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99482 - Exposure of sensitive information to an unauthorized actor
CVE-2024-10463		 CWE-200 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU98644 - Improper input validation
CVE-2024-21235		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU96970 - Resource exhaustion
CVE-2024-43398		 CWE-400 Medium
No
No
 - 10.09.2024 SB2024091006
SB2024091007
SB2024091008
and 28 more
#VU95149 - Improper input validation
CVE-2024-41123		 CWE-20 Medium
No
No
 - 01.08.2024 SB2024080145
SB2024091009
SB2024091607
and 24 more
#VU95148 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2024-41946		 CWE-776 Medium
No
No
 - 01.08.2024 SB2024080145
SB2024082374
SB2024091607
and 22 more
#VU94363 - Improper input validation
CVE-2024-39908		 CWE-20 Medium
No
No
 - 16.07.2024 SB2024071616
SB2024083015
SB2024091009
and 22 more
#VU94361 - Improper input validation
CVE-2024-35176		 CWE-20 Medium
Available
No
 - 16.07.2024 SB2024071615
SB2024071914
SB2024072112
and 19 more
#VU85298 - Argument Injection or Modification
CVE-2021-43809		 CWE-88 Low
No
No
 - 11.01.2024 SB2024011117
SB2024020523
SB2021123107
and 7 more


Showing elements 21 - 40 out of 1271