Known vulnerabilities in SUSE Linux Enterprise Storage - page 3

Vendor: SUSE
Software: SUSE Linux Enterprise Storage
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_storage:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 491
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Storage SUSE Linux Enterprise Storage is affected by 491 known vulnerabilities: 1 critical, 92 high, 191 medium, 207 low Critical High Medium Low

Vulnerabilities (491)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84710 - Out-of-bounds read
CVE-2021-29463		 CWE-125 Medium
No
No
 - 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 7 more
#VU69649 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-34334		 CWE-835 Medium
No
No
 - 28.11.2022 SB2021080919
SB2022112854
SB2023122237
and 8 more
#VU69301 - UNIX Symbolic Link (Symlink) Following
CVE-2022-31256		 CWE-61 Low
No
No
 - 14.11.2022 SB2022111452
SB2022111453
#VU69296 - Out-of-bounds write
CVE-2022-43750		 CWE-787 Low
No
No
 - 14.11.2022 SB2022111443
SB2022113032
SB2022113033
and 72 more
#VU69291 - Incorrect Authorization
CVE-2022-2990		 CWE-863 Low
No
No
 - 14.11.2022 SB2022111431
SB2022111435
SB2022111439
and 14 more
#VU69290 - Incorrect Authorization
CVE-2022-2989		 CWE-863 Low
No
No
 - 14.11.2022 SB2022111428
SB2022111429
SB2022111430
and 14 more
#VU68961 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-27777		 CWE-79 Low
No
No
 - 03.11.2022 SB2022110317
SB2022110319
SB2022110320
and 2 more
#VU68829 - Resource Management Errors
CVE-2022-40304		 CWE-399 Medium
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303		 CWE-190 High
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU68416 - Missing release of memory after effective lifetime
CVE-2022-3551		 CWE-401 Low
No
No
 - 18.10.2022 SB2022101844
SB2022101847
SB2022110129
and 28 more
#VU68415 - Memory corruption
CVE-2022-3550		 CWE-119 Low
No
No
 - 18.10.2022 SB2022101844
SB2022101847
SB2022110129
and 27 more
#VU68317 - NULL Pointer Dereference
CVE-2022-42722		 CWE-476 Medium
No
No
 - 14.10.2022 SB2022101416
SB2022101707
SB2022101712
and 47 more
#VU66123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3709		 CWE-79 Medium
No
No
 - 05.08.2022 SB2022080507
SB2022080510
SB2022080808
and 43 more
#VU57488 - Improper input validation
CVE-2021-3522		 CWE-20 Low
No
No
 - 19.10.2021 SB2021101940
SB2022041131
SB2022041132
and 12 more
#VU55590 - Improper Protection of Alternate Path
CVE-2021-20206		 CWE-424 Medium
No
No
 - 05.08.2021 SB2021032636
SB2021080502
SB2022021637
and 19 more
#VU53615 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-23385		 CWE-601 Low
No
No
 - 27.05.2021 SB2021052714
SB2022110125
SB2022110334
and 1 more
#VU49517 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2021-23926		 CWE-776 High
No
No
 - 14.01.2021 SB2021011401
SB2022072039
SB2022081823
and 21 more
#VU26643 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-10696		 CWE-22 High
No
No
 - 07.04.2020 SB2020040723
SB2020042905
SB2020043013
and 12 more
#VU22927 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15587		 CWE-79 Low
No
No
 - 22.11.2019 SB2019102229
SB2022110425
SB2022111834
and 3 more
#VU20306 - Integer overflow
CVE-2019-13111		 CWE-190 Low
No
No
 - 19.08.2019 SB2019081904
SB2019081383
SB20200611166
and 2 more


Showing elements 41 - 60 out of 491