Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 12 - page 221

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_12:*:*:*:*:*:*:*:*
Total vulnerabilities: 5357
Public exploits: 132
Known exploited (KEV): 52
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 is affected by 5357 known vulnerabilities: 28 critical, 636 high, 1132 medium, 3560 low Critical High Medium Low

Vulnerabilities (5357)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87189 - Stack-based buffer overflow
CVE-2024-22667
CWE-121 High
No
No
- 07.03.2024 SB2024030722
SB2024030729
SB2024031839
and 14 more
#VU87185 - UNIX Symbolic Link (Symlink) Following
CVE-2023-6597
CWE-61 Low
No
No
- 07.03.2024 SB2024030718
SB2024030726
SB2024030727
and 88 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597
CWE-89 High
No
No
- 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU86724 - Covert Timing Channel
CVE-2023-46809
CWE-385 Medium
No
No
- 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 35 more
#VU86718 - Improper Handling of Exceptional Conditions
CVE-2024-21892
CWE-755 Low
No
No
- 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 30 more
#VU86531 - Resource exhaustion
CVE-2024-24814
CWE-400 Medium
No
No
- 15.02.2024 SB2024021511
SB2024022245
SB2024030531
and 9 more
#VU85024 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-51780
CWE-362 Low
No
No
- 05.01.2024 SB2024010527
SB2024021925
SB2024021926
and 66 more
#VU84797 - Command injection
CVE-2023-51765
CWE-77 Medium
No
No
- 27.12.2023 SB2023122716
SB2024013167
SB2024030417
and 4 more
#VU83223 - Use After Free
CVE-2023-44446
CWE-416 High
No
No
- 16.11.2023 SB2023111617
SB2023111748
SB2023112602
and 30 more
#VU81693 - Use After Free
CVE-2023-4921
CWE-416 Low
No
No
- 08.10.2023 SB2023100808
SB2023100810
SB2023101184
and 109 more
#VU80019 - Server-Side Request Forgery (SSRF)
CVE-2022-44730
CWE-918 Medium
No
No
- 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 15 more
#VU80018 - Server-Side Request Forgery (SSRF)
CVE-2022-44729
CWE-918 Medium
No
No
- 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 25 more
#VU68827 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42890
CWE-94 Low
No
No
- 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 34 more
#VU68826 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-41704
CWE-94 High
No
No
- 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 14 more
#VU67586 - Server-Side Request Forgery (SSRF)
CVE-2022-38648
CWE-918 Medium
No
No
- 22.09.2022 SB2022092232
SB2023030742
SB2023040503
and 14 more
#VU67585 - Server-Side Request Forgery (SSRF)
CVE-2022-40146
CWE-918 Medium
Available
No
- 22.09.2022 SB2022092232
SB2023011763
SB2023011838
and 21 more
#VU67584 - Server-Side Request Forgery (SSRF)
CVE-2022-38398
CWE-918 Medium
No
No
- 22.09.2022 SB2022092232
SB2023030742
SB2023040503
and 14 more
#VU52501 - Server-Side Request Forgery (SSRF)
CVE-2020-11987
CWE-918 Medium
No
No
- 23.04.2021 SB2021042315
SB2021042316
SB2021042514
and 32 more
#VU29068 - Server-Side Request Forgery (SSRF)
CVE-2019-17566
CWE-918 Medium
No
No
- 16.06.2020 SB2020061613
SB2020062304
SB2020072310
and 23 more
#VU13180 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-5662
CWE-611 Low
No
No
- 05.06.2018 SB2018060503
SB2017050924
SB2023071416
and 7 more


Showing elements 4401 - 4420 out of 5357