Known vulnerabilities in SUSE Linux Enterprise Server for SAP 15-SP3 - page 3

Vendor: SUSE
Software: SUSE Linux Enterprise Server for SAP
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 779
Public exploits: 29
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server for SAP version 15-SP3 SUSE Linux Enterprise Server for SAP 15-SP3 is affected by 779 vulnerabilities: 8 critical, 188 high, 271 medium, 312 low Critical High Medium Low

Vulnerabilities (779)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 - 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71991 - Use After Free
CVE-2023-0494		 CWE-416 Low
No
No
 - 07.02.2023 SB2023020729
SB2023020730
SB2023020731
and 42 more
#VU71473 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-4254		 CWE-90 High
No
No
 - 24.01.2023 SB2023012437
SB2023012440
SB2023012457
and 13 more
#VU71470 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-4515		 CWE-78 High
No
No
 - 24.01.2023 SB2023012423
SB2023012430
SB2023020149
and 5 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760		 CWE-444 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001		 CWE-119 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more
#VU71236 - Untrusted Search Path
CVE-2022-4883		 CWE-426 Low
No
No
 - 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 38 more
#VU71235 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-44617		 CWE-835 Low
No
No
 - 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 34 more
#VU71234 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-46285		 CWE-835 Low
Public exploit available
No
 - 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 35 more
#VU71192 - Integer overflow
CVE-2022-35977		 CWE-190 Medium
No
No
 - 16.01.2023 SB2023011657
SB2023020661
SB2023020740
and 17 more
#VU69337 - Integer overflow
CVE-2022-42898		 CWE-190 Medium
No
No
 - 15.11.2022 SB2022111530
SB2022111610
SB2022111621
and 123 more
#VU69290 - Incorrect Authorization
CVE-2022-2989		 CWE-863 Low
No
No
 - 14.11.2022 SB2022111428
SB2022111429
SB2022111430
and 14 more
#VU69240 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-45063		 CWE-78 High
No
No
 - 11.11.2022 SB2022111113
SB2022112204
SB2023011810
and 11 more
#VU68495 - Out-of-bounds read
CVE-2022-41742		 CWE-125 Medium
No
No
 - 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 34 more
#VU68494 - Out-of-bounds read
CVE-2022-41741		 CWE-125 Medium
No
No
 - 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 32 more
#VU61829 - Permissions, Privileges, and Access Controls
CVE-2022-27649		 CWE-264 Medium
No
No
 - 04.04.2022 SB2022040410
SB2022042012
SB2022042725
and 14 more


Showing elements 41 - 60 out of 779