Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 12-SP3 - page 4

Vendor: SUSE
Software: SUSE Linux Enterprise Server for SAP Applications
Version: 12-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 91
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server for SAP Applications version 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP3 is affected by 91 vulnerabilities: 12 high, 59 medium, 20 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82817 - Incorrect Permission Assignment for Critical Resource
CVE-2022-22941		 CWE-732 Medium
No
No
 - 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU82815 - Authentication Bypass by Capture-replay
CVE-2022-22936		 CWE-294 Medium
No
No
 - 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU82801 - Insufficient Verification of Data Authenticity
CVE-2022-22935		 CWE-345 Medium
No
No
 - 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 20 more
#VU82800 - Cryptographic Issues
CVE-2022-22934		 CWE-310 Low
No
No
 - 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU64034 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3918		 CWE-94 High
No
No
 - 07.06.2022 SB2021111302
SB2022060836
SB2022071504
and 45 more
#VU64030 - Resource exhaustion
CVE-2021-44906		 CWE-400 High
No
No
 - 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 52 more
#VU62512 - Improper input validation
CVE-2021-3572		 CWE-20 Medium
No
No
 - 22.04.2022 SB2022042257
SB2022042259
SB2021071390
and 51 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191		 CWE-327 Medium
No
No
 - 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU61681 - Server-Side Request Forgery (SSRF)
CVE-2021-4189		 CWE-918 Medium
No
No
 - 29.03.2022 SB2022032904
SB2022032905
SB2022032907
and 42 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391		 CWE-93 Medium
No
No
 - 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU61662 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-24302		 CWE-362 Low
No
No
 - 28.03.2022 SB2022032832
SB2022032837
SB2022033014
and 20 more
#VU61611 - Origin Validation Error
CVE-2022-21712		 CWE-346 Low
No
No
 - 24.03.2022 SB2022032429
SB2022032438
SB2022032448
and 15 more
#VU61600 - Permissions, Privileges, and Access Controls
CVE-2022-24769		 CWE-264 Medium
No
No
 - 24.03.2022 SB2022032414
SB2022032503
SB2022042141
and 29 more
#VU61471 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0235		 CWE-200 Low
No
No
 - 20.03.2022 SB2022032001
SB2022032002
SB2022032009
and 35 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Public exploit available
No
 - 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU60972 - Permissions, Privileges, and Access Controls
CVE-2022-23648		 CWE-264 Medium
Public exploit available
No
 - 03.03.2022 SB2022030305
SB2022030722
SB2022030725
and 30 more
#VU60707 - Use After Free
CVE-2021-21708		 CWE-416 Medium
Public exploit available
No
 - 18.02.2022 SB2022021804
SB2022021813
SB2022022118
and 19 more
#VU58331 - Improper input validation
CVE-2021-21707		 CWE-20 Medium
No
No
 - 23.11.2021 SB2021112317
SB2021112318
SB2022011821
and 21 more
#VU10880 - Resource exhaustion
CVE-2015-9253		 CWE-400 Low
No
No
 - 07.03.2018 SB2018021618
SB2018091805
SB2020021722
and 3 more
#VU10335 - Improper input validation
CVE-2017-8923		 CWE-20 Low
No
No
 - 12.05.2017 SB2017051517
SB2022111831
SB2022111832
and 5 more


Showing elements 61 - 80 out of 91