Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 12-SP4 - page 7

Vendor: SUSE
Software: SUSE Linux Enterprise Server for SAP Applications
Version: 12-SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 566
Public exploits: 41
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server for SAP Applications version 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP4 is affected by 566 vulnerabilities: 1 critical, 36 high, 244 medium, 285 low Critical High Medium Low

Vulnerabilities (566)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 - 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU82944 - UNIX Symbolic Link (Symlink) Following
CVE-2023-34049		 CWE-61 Low
No
No
 - 09.11.2023 SB2023110931
SB2023110932
SB2023110933
and 17 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 - 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU82070 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39333		 CWE-94 Low
No
No
 - 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 28 more
#VU82069 - Improper Validation of Integrity Check Value
CVE-2023-38552		 CWE-354 Medium
No
No
 - 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 34 more
#VU82066 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45143		 CWE-200 Medium
No
No
 - 17.10.2023 SB2023101702
SB2023101703
SB2023101801
and 31 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Public exploit available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Public exploit available
No
 - 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU81045 - Security Features
CVE-2023-4039		 CWE-254 Medium
No
No
 - 21.09.2023 SB2023092156
SB2023092201
SB2023092204
and 22 more
#VU80585 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41105		 CWE-22 Low
No
No
 - 11.09.2023 SB2023082825
SB2023100328
SB2023100362
and 18 more
#VU80472 - Permissions, Privileges, and Access Controls
CVE-2023-20898		 CWE-264 Low
No
No
 - 05.09.2023 SB2023090559
SB2023090563
SB2023090601
and 13 more
#VU80471 - Improper input validation
CVE-2023-20897		 CWE-20 Medium
No
No
 - 05.09.2023 SB2023090559
SB2023090563
SB2023090601
and 14 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 - 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU79967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40577		 CWE-79 Low
No
No
 - 25.08.2023 SB2023082505
SB2024012403
SB2024021614
and 5 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823		 CWE-611 High
No
No
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 - 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU48373 - Exposure of sensitive information to an unauthorized actor
CVE-2020-12912		 CWE-200 Low
No
No
 - 11.11.2020 SB2020111118
SB2023120115
SB2023121950
and 4 more
#VU48372 - Observable Response Discrepancy
CVE-2020-8695		 CWE-204 Low
No
No
 - 11.11.2020 SB2020111117
SB2020112423
SB2020112424
and 35 more
#VU48371 - Improper Access Control
CVE-2020-8694		 CWE-284 Low
No
No
 - 11.11.2020 SB2020111117
SB2023120115
SB2023121950
and 9 more
#VU46905 - Buffer overflow
CVE-2020-8927		 CWE-120 Medium
No
No
 - 15.09.2020 SB2020092215
SB2020092701
SB2020092704
and 40 more


Showing elements 121 - 140 out of 566