Known vulnerabilities in SUSE Manager Proxy Module - page 2

Vendor: SUSE
Software: SUSE Manager Proxy Module
Software CPE: cpe:2.3:o:suse:suse_manager_proxy_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 69
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Manager Proxy Module SUSE Manager Proxy Module is affected by 69 known vulnerabilities: 7 high, 32 medium, 30 low Critical High Medium Low

Vulnerabilities (69)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89210 - Incorrect Authorization
CVE-2023-6152		 CWE-863 Low
No
No
 - 07.05.2024 SB2024050715
SB2024050717
SB2024050718
and 8 more
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 - 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU87845 - Improper Authorization
CVE-2024-1313		 CWE-285 Medium
No
No
 - 27.03.2024 SB2024032711
SB2024043089
SB2024050720
and 10 more
#VU86855 - Improper Authorization
CVE-2022-0860		 CWE-285 Medium
No
No
 - 27.02.2024 SB2024022765
SB2024022766
SB2024022767
and 6 more
#VU86618 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-32189		 CWE-22 Medium
No
No
 - 20.02.2024 SB2024022023
SB2024022029
#VU86612 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22232		 CWE-22 Medium
No
No
 - 20.02.2024 SB2024022022
SB2024022023
SB2024022024
and 14 more
#VU86611 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22231		 CWE-22 Low
No
No
 - 20.02.2024 SB2024022022
SB2024022023
SB2024022024
and 13 more
#VU85621 - Missing release of memory after effective lifetime
CVE-2024-0690		 CWE-401 Low
No
No
 - 19.01.2024 SB2024011931
SB2024011933
SB2024011934
and 11 more
#VU84381 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-5764		 CWE-94 Medium
No
No
 - 13.12.2023 SB2023121315
SB2023121316
SB2023121317
and 16 more
#VU83977 - Insufficient Entropy
CVE-2023-31582		 CWE-331 Medium
No
No
 - 07.12.2023 SB2023120724
SB2023120727
SB2023120731
and 17 more
#VU72126 - Deserialization of Untrusted Data
CVE-2022-1415		 CWE-502 High
No
No
 - 11.02.2023 SB2023021104
SB2023021106
SB2023021108
and 3 more
#VU71586 - Out-of-bounds write
CVE-2022-40152		 CWE-787 Medium
No
No
 - 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU67516 - Command injection
CVE-2021-42740		 CWE-77 High
No
No
 - 20.09.2022 SB2021102139
SB2022092053
SB2022092054
and 9 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 - 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64404 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43815		 CWE-22 Low
No
No
 - 15.06.2022 SB2021121022
SB2022062026
SB2022102094
and 8 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU47274 - Improper Verification of Cryptographic Signature
CVE-2020-14365		 CWE-347 Low
No
No
 - 23.09.2020 SB2020092344
SB2020100222
SB2020102019
and 12 more
#VU47114 - Improper input validation
CVE-2020-14330		 CWE-20 Low
No
No
 - 11.09.2020 SB2020092608
SB2020102017
SB2021080804
and 8 more
#VU29029 - Information Exposure Through Log Files
CVE-2020-1753		 CWE-532 Low
No
No
 - 15.06.2020 SB2020032420
SB2020061518
SB2021080804
and 11 more
#VU36808 - Command injection
CVE-2016-8628		 CWE-77 High
No
No
 - 31.07.2018 SB2018073121
SB2024050721
SB2016110217
and 8 more


Showing elements 21 - 40 out of 69