Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 12-SP4 - page 7

Vendor: SUSE

Software: SUSE Linux Enterprise Server for SAP Applications

Version: 12-SP4

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 569

Public exploits: 41

Known exploited (KEV): 8

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (569)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU72131 - Exposure of sensitive information to an unauthorized actor CVE-2022-39201	CWE-200	Medium	No	No	-	12.02.2023	SB2023021201 SB2023021202 SB2023021203 and 12 more
#VU72130 - Exposure of sensitive information to an unauthorized actor CVE-2022-31130	CWE-200	Medium	No	No	-	12.02.2023	SB2023021201 SB2023021202 SB2023021203 and 11 more
#VU72128 - Improper Verification of Cryptographic Signature CVE-2022-31123	CWE-347	Medium	No	No	-	11.02.2023	SB2023021201 SB2023021202 SB2023021203 and 15 more
#VU71567 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-23552	CWE-79	Low	No	No	-	26.01.2023	SB2023012632 SB2023032032 SB2023032033 and 10 more
#VU68897 - Resource exhaustion CVE-2022-32149	CWE-400	Medium	No	No	-	01.11.2022	SB2022110139 SB2022110140 SB2022110142 and 68 more
#VU68557 - Authentication Bypass Using an Alternate Path or Channel CVE-2022-35957	CWE-288	Low	No	No	-	20.10.2022	SB2022092614 SB2022102094 SB2023050969 and 16 more
#VU67646 - Permissions, Privileges, and Access Controls CVE-2022-36062	CWE-264	Medium	No	No	-	26.09.2022	SB2022092614 SB2022102094 SB2023062230 and 10 more
#VU67396 - Improper input validation CVE-2022-27664	CWE-20	Medium	No	No	-	15.09.2022	SB2022091520 SB2022091521 SB2022092144 and 127 more
#VU65354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31097	CWE-79	Low	No	No	-	15.07.2022	SB2022071510 SB2022102094 SB2022102641 and 16 more
#VU65353 - Improper Authentication CVE-2022-31107	CWE-287	High	No	No	-	15.07.2022	SB2022071510 SB2022072642 SB2022072643 and 21 more
#VU64430 - Incorrect Authorization CVE-2021-41244	CWE-863	Medium	No	No	-	16.06.2022	SB2021111513 SB2022062026 SB2022102094 and 5 more
#VU64402 - Exposure of sensitive information to an unauthorized actor CVE-2022-21673	CWE-200	Low	No	No	-	15.06.2022	SB2022061623 SB2022062026 SB2022081215 and 12 more
#VU64399 - Cross-Site Request Forgery (CSRF) CVE-2022-21703	CWE-352	Medium	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-21702	CWE-79	Low	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key CVE-2022-21713	CWE-639	Low	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 13 more
#VU64273 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-43813	CWE-22	Low	No	No	-	14.06.2022	SB2022061422 SB2022062026 SB2022081215 and 16 more
#VU63461 - Improper input validation CVE-2022-29170	CWE-20	Low	No	No	-	19.05.2022	SB2022051916 SB2024012352 SB2024012403 and 3 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191	CWE-327	Medium	No	No	-	10.04.2022	SB2022041004 SB2022041406 SB2022081226 and 91 more
#VU57926 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41174	CWE-79	Low	Public exploit available	No	-	03.11.2021	SB2021110312 SB2021110517 SB2022062026 and 4 more
#VU57320 - Improper Access Control CVE-2021-39226	CWE-284	Medium	Public exploit available	Exploited	-	12.10.2021	SB2021101262 SB2021101320 SB2021101321 and 22 more

Showing elements 121 - 140 out of 569

Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 12-SP4 - page 7

Vulnerabilities by Severity

Vulnerabilities (569)

Please verify you're human