Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 12-SP4 - page 9

Vendor: SUSE
Version: 12-SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:*:*:*:*:*:*:*:*
Total vulnerabilities: 569
Public exploits: 41
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server for SAP Applications version 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP4 is affected by 569 vulnerabilities: 1 critical, 36 high, 246 medium, 286 low Critical High Medium Low

Vulnerabilities (569)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82070 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39333
CWE-94 Low
No
No
- 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 28 more
#VU82066 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45143
CWE-200 Medium
No
No
- 17.10.2023 SB2023101702
SB2023101703
SB2023101801
and 31 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Public exploit available
Exploited
- 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804
CWE-200 Low
Public exploit available
No
- 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU80585 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41105
CWE-22 Low
No
No
- 11.09.2023 SB2023082825
SB2023100328
SB2023100362
and 18 more
#VU80472 - Permissions, Privileges, and Access Controls
CVE-2023-20898
CWE-264 Low
No
No
- 05.09.2023 SB2023090559
SB2023090563
SB2023090601
and 13 more
#VU80471 - Improper input validation
CVE-2023-20897
CWE-20 Medium
No
No
- 05.09.2023 SB2023090559
SB2023090563
SB2023090601
and 14 more
#VU79836 - Inefficient Regular Expression Complexity
CVE-2023-26112
CWE-1333 Medium
No
No
- 22.08.2023 SB2023082229
SB2023082230
SB2023082231
and 8 more
#VU79335 - Permissions, Privileges, and Access Controls
CVE-2023-32559
CWE-264 Medium
No
No
- 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 39 more
#VU79334 - Permissions, Privileges, and Access Controls
CVE-2023-32006
CWE-264 Medium
No
No
- 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 38 more
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002
CWE-264 Medium
No
No
- 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU78978 - Memory corruption
CVE-2023-3824
CWE-119 Critical
Public exploit available
Exploited
- 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823
CWE-611 High
No
No
- 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409
CWE-295 Medium
No
No
- 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU77606 - Inconsistency Between Implementation and Documented Design
CVE-2023-30590
CWE-1068 Medium
No
No
- 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-30589
CWE-444 Medium
No
No
- 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 43 more
#VU77586 - Permissions, Privileges, and Access Controls
CVE-2023-30581
CWE-264 Medium
No
No
- 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 31 more
#VU74468 - Unprotected Alternate Channel
CVE-2023-28840
CWE-420 Medium
No
No
- 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 20 more
#VU74467 - Missing Encryption of Sensitive Data
CVE-2023-28841
CWE-311 Medium
No
No
- 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 18 more
#VU46905 - Buffer overflow
CVE-2020-8927
CWE-120 Medium
No
No
- 15.09.2020 SB2020092215
SB2020092701
SB2020092704
and 40 more


Showing elements 161 - 180 out of 569