Known vulnerabilities in SUSE Manager Client Tools Beta for SLE

Vendor: SUSE
Software: SUSE Manager Client Tools Beta for SLE
Software CPE: cpe:2.3:o:suse:suse_manager_client_tools_beta_for_sle:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 63
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Manager Client Tools Beta for SLE SUSE Manager Client Tools Beta for SLE is affected by 63 known vulnerabilities: 6 high, 24 medium, 33 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89210 - Incorrect Authorization
CVE-2023-6152		 CWE-863 Low
No
No
 - 07.05.2024 SB2024050715
SB2024050717
SB2024050718
and 8 more
#VU87845 - Improper Authorization
CVE-2024-1313		 CWE-285 Medium
No
No
 - 27.03.2024 SB2024032711
SB2024043089
SB2024050720
and 10 more
#VU85621 - Missing release of memory after effective lifetime
CVE-2024-0690		 CWE-401 Low
No
No
 - 19.01.2024 SB2024011931
SB2024011933
SB2024011934
and 11 more
#VU84381 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-5764		 CWE-94 Medium
No
No
 - 13.12.2023 SB2023121315
SB2023121316
SB2023121317
and 16 more
#VU79967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40577		 CWE-79 Low
No
No
 - 25.08.2023 SB2023082505
SB2024012403
SB2024021614
and 5 more
#VU78470 - Missing Authorization
CVE-2023-2183		 CWE-862 Low
No
No
 - 20.07.2023 SB20230720110
SB20230720114
SB20230720115
and 9 more
#VU68336 - UNIX Symbolic Link (Symlink) Following
CVE-2019-3698		 CWE-61 Low
No
No
 - 14.10.2022 SB2022101445
SB2024051429
SB2024061808
#VU64402 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21673		 CWE-200 Low
No
No
 - 15.06.2022 SB2022061623
SB2022062026
SB2022081215
and 12 more
#VU64399 - Cross-Site Request Forgery (CSRF)
CVE-2022-21703		 CWE-352 Medium
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21702		 CWE-79 Low
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key
CVE-2022-21713		 CWE-639 Low
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 13 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191		 CWE-327 Medium
No
No
 - 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU61599 - Improper input validation
CVE-2022-21698		 CWE-20 Medium
No
No
 - 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU57320 - Improper Access Control
CVE-2021-39226		 CWE-284 Medium
Available
Exploited
 - 12.10.2021 SB2021101262
SB2021101320
SB2021101321
and 22 more
#VU47274 - Improper Verification of Cryptographic Signature
CVE-2020-14365		 CWE-347 Low
No
No
 - 23.09.2020 SB2020092344
SB2020100222
SB2020102019
and 12 more
#VU14157 - Permissions, Privileges, and Access Controls
CVE-2018-10874		 CWE-264 Low
No
No
 - 31.07.2018 SB2018080113
SB2018073118
SB2019011610
and 10 more
#VU12555 - Information Exposure Through Log Files
CVE-2017-7550		 CWE-532 Low
No
No
 - 05.03.2018 SB2018030511
SB2017101940
SB2024050718
and 4 more
#VU7411 - Improper input validation
CVE-2016-8647		 CWE-20 Low
No
No
 - 11.07.2017 SB2017070615
SB2024050718
SB2024050721
and 4 more
#VU6639 - Improper input validation
CVE-2017-7466		 CWE-20 Medium
Available
No
 - 17.05.2017 SB2017052310
SB2017052601
SB2017070615
and 22 more
#VU1344 - UNIX Symbolic Link (Symlink) Following
CVE-2016-9566		 CWE-61 Low
Available
No
 - 16.12.2016 SB2016121601
SB2016123102
SB2022101445
and 2 more


Showing elements 1 - 20 out of 63