Known vulnerabilities in SUSE Linux Enterprise Workstation Extension 12-SP5 - page 11

Vendor: SUSE
Version: 12-SP5
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_workstation_extension:*:*:*:*:*:*:*:*
Total vulnerabilities: 351
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Workstation Extension version 12-SP5 SUSE Linux Enterprise Workstation Extension 12-SP5 is affected by 351 vulnerabilities: 35 high, 64 medium, 252 low Critical High Medium Low

Vulnerabilities (351)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63164 - Double Free
CVE-2022-28390
CWE-415 Low
No
No
- 13.05.2022 SB2022051312
SB2022051712
SB2022051833
and 61 more
#VU63162 - Double Free
CVE-2022-28389
CWE-415 Low
No
No
- 13.05.2022 SB2022051312
SB2022051712
SB2022060826
and 42 more
#VU63160 - Double Free
CVE-2022-28388
CWE-415 Low
No
No
- 13.05.2022 SB2022051312
SB2022051712
SB2022060826
and 52 more
#VU61681 - Server-Side Request Forgery (SSRF)
CVE-2021-4189
CWE-918 Medium
No
No
- 29.03.2022 SB2022032904
SB2022032905
SB2022032907
and 42 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391
CWE-93 Medium
No
No
- 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU61620 - Improper Handling of Exceptional Conditions
CVE-2022-23121
CWE-755 High
No
No
- 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 7 more
#VU61619 - Stack-based buffer overflow
CVE-2022-23125
CWE-121 High
No
No
- 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 6 more
#VU61268 - Resource exhaustion
CVE-2021-4115
CWE-400 Low
No
No
- 13.03.2022 SB2022031301
SB2022031302
SB2022040517
and 13 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407
CWE-89 High
No
No
- 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU60762 - Improper Certificate Validation
CVE-2021-25636
CWE-295 Low
No
No
- 22.02.2022 SB2022022217
SB2022031624
SB2022110838
and 4 more
#VU60052 - Heap-based Buffer Overflow
CVE-2021-45942
CWE-122 High
No
No
- 27.01.2022 SB2022012703
SB2022011238
SB2022011239
and 6 more
#VU60007 - Improper input validation
CVE-2021-4034
CWE-20 Medium
Public exploit available
Exploited
- 26.01.2022 SB2022012601
SB2022012604
SB2022012605
and 51 more
#VU59099 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-45463
CWE-78 High
No
No
- 28.12.2021 SB2021122817
SB2021122818
SB2022011816
and 12 more
#VU52802 - Heap-based Buffer Overflow
CVE-2021-31439
CWE-122 Medium
No
No
- 03.05.2021 SB2021050308
SB2022042577
SB2022042578
and 6 more
#VU46199 - Out-of-bounds read
CVE-2020-17507
CWE-125 Medium
No
No
- 12.08.2020 SB2020081278
SB2020081816
SB2020091405
and 17 more
#VU33340 - Out-of-bounds read
CVE-2020-0034
CWE-125 Medium
No
No
- 10.03.2020 SB2020031069
SB2020052311
SB2020032664
and 4 more
#VU36237 - Resource exhaustion
CVE-2019-6292
CWE-400 Medium
No
No
- 15.01.2019 SB2018122811
SB2022040117
SB2022040118
and 3 more
#VU36239 - Memory corruption
CVE-2019-6285
CWE-119 Medium
No
No
- 14.01.2019 SB2018122811
SB2022070719
SB2022040117
and 4 more
#VU36262 - Memory corruption
CVE-2018-20573
CWE-119 Medium
No
No
- 28.12.2018 SB2018122811
SB2022070719
SB2022040117
and 4 more
#VU36263 - Memory corruption
CVE-2018-20574
CWE-119 Medium
No
No
- 28.12.2018 SB2018122811
SB2022070719
SB2022040117
and 4 more


Showing elements 201 - 220 out of 351