Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 12-SP3 - page 3

Vendor: SUSE

Software: SUSE Linux Enterprise Server for SAP Applications

Version: 12-SP3

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 91

Public exploits: 7

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (91)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU67166 - Server-Side Request Forgery (SSRF) CVE-2022-35949	CWE-918	Medium	No	No	-	11.09.2022	SB2022091109 SB2022091110 SB2022091217 and 4 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-35948	CWE-93	Medium	No	No	-	11.09.2022	SB2022091109 SB2022091110 SB2022091217 and 4 more
#VU67163 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-31150	CWE-93	Medium	No	No	-	11.09.2022	SB2022091108 SB2022091110 SB2022091217 and 2 more
#VU66698 - Exposure of sensitive information to an unauthorized actor CVE-2022-29244	CWE-200	Medium	No	No	-	22.08.2022	SB2022082252 SB2022082253 SB2022091110 and 15 more
#VU65771 - Information Exposure Through Timing Discrepancy CVE-2020-25657	CWE-208	Medium	No	No	-	26.07.2022	SB2021011288 SB2022072601 SB2022072602 and 7 more
#VU64922 - Missing Encryption of Sensitive Data CVE-2022-2097	CWE-311	Low	No	No	-	05.07.2022	SB2022070509 SB2022070522 SB2022070531 and 112 more
#VU64805 - Improper input validation CVE-2021-43565	CWE-20	Medium	No	No	-	29.06.2022	SB2021120347 SB2022062928 SB2022072127 and 39 more
#VU64660 - Improper Authentication CVE-2022-22967	CWE-287	Low	No	No	-	24.06.2022	SB2022062428 SB2022062430 SB2022062441 and 13 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2015-20107	CWE-78	High	No	No	-	22.06.2022	SB2022062206 SB2022062207 SB2022062436 and 85 more
#VU64007 - Resource exhaustion CVE-2022-31030	CWE-400	Medium	No	No	-	07.06.2022	SB2022060702 SB2022061206 SB2022061326 and 23 more
#VU63168 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-29217	CWE-327	Medium	No	No	-	13.05.2022	SB2022051319 SB2022071428 SB2022071429 and 12 more
#VU63090 - Permissions, Privileges, and Access Controls CVE-2022-29162	CWE-264	Medium	No	No	-	12.05.2022	SB2022051205 SB2022062435 SB2022071158 and 32 more
#VU62077 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-24801	CWE-444	Medium	No	No	-	12.04.2022	SB2022041212 SB2022050231 SB2022050232 and 21 more
#VU61017 - Memory corruption CVE-2022-21716	CWE-119	Medium	No	No	-	04.03.2022	SB2022030407 SB2022032438 SB2022032448 and 17 more
#VU58229 - Type confusion CVE-2021-41190	CWE-843	Low	No	No	-	18.11.2021	SB2021111806 SB2021111807 SB2021111809 and 39 more
#VU54520 - Improper input validation CVE-2020-14343	CWE-20	High	Public exploit available	No	-	04.07.2021	SB2021070403 SB2021070404 SB2022042259 and 17 more
#VU26356 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2020-10109	CWE-444	Medium	No	No	-	24.03.2020	SB2020031234 SB2020032419 SB2020043028 and 8 more
#VU25823 - Improper input validation CVE-2020-1747	CWE-20	High	No	No	-	09.03.2020	SB2020030903 SB2020041201 SB2020051129 and 21 more
#VU25721 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-8130	CWE-78	High	No	No	-	02.03.2020	SB2020030203 SB2020033103 SB2020052720 and 5 more
#VU19388 - Credentials Management CVE-2018-18074	CWE-255	High	No	No	-	26.07.2019	SB2019072007 SB2019080710 SB2020032626 and 18 more

Showing elements 41 - 60 out of 91

Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 12-SP3 - page 3

Vulnerabilities by Severity

Vulnerabilities (91)

Please verify you're human