Known vulnerabilities in SUSE Manager Server 4.0 - page 13

Vendor: SUSE
Software: SUSE Manager Server
Version: 4.0
Software CPE: cpe:2.3:o:suse:suse_manager_server:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 645
Public exploits: 36
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Manager Server version 4.0 SUSE Manager Server 4.0 is affected by 645 vulnerabilities: 7 critical, 72 high, 197 medium, 369 low Critical High Medium Low

Vulnerabilities (645)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68860 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31163		 CWE-22 Medium
No
No
 - 31.10.2022 SB2022103147
SB2022103161
SB2022072942
and 6 more
#VU66591 - Out-of-bounds read
CVE-2022-1462		 CWE-125 Low
No
No
 - 17.08.2022 SB2022081737
SB2022081739
SB2022081740
and 49 more
#VU66590 - Out-of-bounds write
CVE-2021-33656		 CWE-787 Low
No
No
 - 17.08.2022 SB2022081736
SB2022081739
SB2022081740
and 48 more
#VU66589 - NULL Pointer Dereference
CVE-2020-36558		 CWE-476 Low
No
No
 - 17.08.2022 SB2022081735
SB2022081739
SB2022081740
and 32 more
#VU66588 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-36557		 CWE-362 Low
No
No
 - 17.08.2022 SB2022081734
SB2022081739
SB2022081740
and 21 more
#VU66476 - Improper input validation
CVE-2022-36946		 CWE-20 Medium
Public exploit available
No
 - 13.08.2022 SB2022081305
SB2022081647
SB2022081739
and 73 more
#VU65903 - Permissions, Privileges, and Access Controls
CVE-2022-2553		 CWE-264 Low
No
No
 - 01.08.2022 SB2022080105
SB2022080113
SB2022080114
and 12 more
#VU65859 - Resource exhaustion
CVE-2020-29651		 CWE-400 Medium
No
No
 - 28.07.2022 SB2022072916
SB2022081723
SB2022093029
and 8 more
#VU65833 - Out-of-bounds write
CVE-2021-33655		 CWE-787 Low
No
No
 - 27.07.2022 SB2022072725
SB2022072814
SB2022081739
and 77 more
#VU65824 - Missing release of memory after effective lifetime
CVE-2022-32742		 CWE-401 Low
No
No
 - 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 36 more
#VU65345 - Exposure of sensitive information to an unauthorized actor
CVE-2022-26365		 CWE-200 Low
No
No
 - 15.07.2022 SB2022071603
SB2022071604
SB2022071605
and 62 more
#VU65318 - Use After Free
CVE-2022-2318		 CWE-416 Low
No
No
 - 14.07.2022 SB2022071603
SB2022071604
SB2022071605
and 49 more
#VU65205 - Processor optimization removal or modification of security-critical code
CVE-2022-29900		 CWE-1037 Low
No
No
 - 12.07.2022 SB2022071249
SB2022071346
SB2022071602
and 76 more
#VU64861 - Use After Free
CVE-2022-1679		 CWE-416 Low
No
No
 - 02.07.2022 SB2022070218
SB2022070221
SB2022070717
and 82 more
#VU64208 - Permissions, Privileges, and Access Controls
CVE-2022-20166		 CWE-264 Low
No
No
 - 13.06.2022 SB2022061414
SB2022081739
SB2022081740
and 16 more
#VU64207 - Permissions, Privileges, and Access Controls
CVE-2022-20154		 CWE-264 Low
No
No
 - 13.06.2022 SB2022061414
SB2022071602
SB2022071603
and 32 more
#VU64136 - Exposure of sensitive information to an unauthorized actor
CVE-2022-20132		 CWE-200 Low
No
No
 - 09.06.2022 SB2022061009
SB2022071346
SB2022071602
and 26 more
#VU64134 - Permissions, Privileges, and Access Controls
CVE-2022-20141		 CWE-264 Low
No
No
 - 09.06.2022 SB2022061009
SB2022062437
SB2022062440
and 57 more
#VU63323 - Memory corruption
CVE-2021-4157		 CWE-119 High
No
No
 - 17.05.2022 SB2022051833
SB2022062928
SB2022062931
and 27 more
#VU61565 - Exposure of resource to wrong sphere
CVE-2021-26341		 CWE-668 Low
No
No
 - 23.03.2022 SB2022032308
SB2022071346
SB2022071602
and 32 more


Showing elements 241 - 260 out of 645