Known vulnerabilities in SUSE Manager Proxy Module - page 2

Vendor: SUSE
Software: SUSE Manager Proxy Module
Software CPE: cpe:2.3:o:suse:suse_manager_proxy_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 69
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Manager Proxy Module SUSE Manager Proxy Module is affected by 69 known vulnerabilities: 7 high, 32 medium, 30 low Critical High Medium Low

Vulnerabilities (69)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 - 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU86855 - Improper Authorization
CVE-2022-0860		 CWE-285 Medium
No
No
 - 27.02.2024 SB2024022765
SB2024022766
SB2024022767
and 6 more
#VU86612 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22232		 CWE-22 Medium
No
No
 - 20.02.2024 SB2024022022
SB2024022023
SB2024022024
and 14 more
#VU86611 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22231		 CWE-22 Low
No
No
 - 20.02.2024 SB2024022022
SB2024022023
SB2024022024
and 13 more
#VU84791 - Information Exposure Through Log Files
CVE-2023-22644		 CWE-532 Low
No
No
 - 26.12.2023 SB2023122702
SB2023122703
SB2024022748
and 1 more
#VU72126 - Deserialization of Untrusted Data
CVE-2022-1415		 CWE-502 High
No
No
 - 11.02.2023 SB2023021104
SB2023021106
SB2023021108
and 3 more
#VU71586 - Out-of-bounds write
CVE-2022-40152		 CWE-787 Medium
No
No
 - 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU67516 - Command injection
CVE-2021-42740		 CWE-77 High
No
No
 - 20.09.2022 SB2021102139
SB2022092053
SB2022092054
and 9 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 - 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU47274 - Improper Verification of Cryptographic Signature
CVE-2020-14365		 CWE-347 Low
No
No
 - 23.09.2020 SB2020092344
SB2020100222
SB2020102019
and 12 more
#VU47114 - Improper input validation
CVE-2020-14330		 CWE-20 Low
No
No
 - 11.09.2020 SB2020092608
SB2020102017
SB2021080804
and 8 more
#VU47115 - Information Exposure Through Log Files
CVE-2020-14332		 CWE-532 Low
No
No
 - 11.09.2020 SB2020092609
SB2020102018
SB2021080804
and 7 more
#VU29567 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-10744		 CWE-362 Low
No
No
 - 07.07.2020 SB2020051522
SB2024050721
#VU36806 - Key Management Errors
CVE-2016-8614		 CWE-320 Medium
No
No
 - 31.07.2018 SB2018073121
SB2024050721
SB2016110217
and 7 more
#VU36808 - Command injection
CVE-2016-8628		 CWE-77 High
No
No
 - 31.07.2018 SB2018073121
SB2024050721
SB2016110217
and 8 more
#VU14157 - Permissions, Privileges, and Access Controls
CVE-2018-10874		 CWE-264 Low
No
No
 - 31.07.2018 SB2018080113
SB2018073118
SB2019011610
and 10 more
#VU12555 - Information Exposure Through Log Files
CVE-2017-7550		 CWE-532 Low
No
No
 - 05.03.2018 SB2018030511
SB2017101940
SB2024050718
and 4 more
#VU7411 - Improper input validation
CVE-2016-8647		 CWE-20 Low
No
No
 - 11.07.2017 SB2017070615
SB2024050718
SB2024050721
and 4 more
#VU6639 - Improper input validation
CVE-2017-7466		 CWE-20 Medium
Available
No
 - 17.05.2017 SB2017052310
SB2017052601
SB2017070615
and 22 more


Showing elements 21 - 40 out of 69