Known vulnerabilities in SUSE Manager Server 4.2 - page 136

Vendor: SUSE
Software: SUSE Manager Server
Version: 4.2
Software CPE: cpe:2.3:o:suse:suse_manager_server:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3006
Public exploits: 100
Known exploited (KEV): 31
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Manager Server version 4.2 SUSE Manager Server 4.2 is affected by 3006 vulnerabilities: 15 critical, 362 high, 729 medium, 1900 low Critical High Medium Low

Vulnerabilities (3006)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63468 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-3639		 CWE-601 Low
No
No
 - 20.05.2022 SB2022052019
SB2021090215
SB2021090845
and 8 more
#VU63441 - Resource exhaustion
CVE-2022-26360		 CWE-400 Low
No
No
 - 19.05.2022 SB2022061629
SB2022062429
SB2022041955
and 12 more
#VU63440 - Resource exhaustion
CVE-2022-26359		 CWE-400 Low
No
No
 - 19.05.2022 SB2022061629
SB2022062429
SB2022041955
and 12 more
#VU63439 - Resource exhaustion
CVE-2022-26358		 CWE-400 Low
No
No
 - 19.05.2022 SB2022061629
SB2022062429
SB2022041955
and 12 more
#VU63438 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-26357		 CWE-362 Low
No
No
 - 19.05.2022 SB2022062429
SB2022041955
SB20220422123
and 10 more
#VU63435 - Missing release of memory after effective lifetime
CVE-2022-26356		 CWE-401 Low
No
No
 - 19.05.2022 SB2022062429
SB2022041955
SB20220422123
and 10 more
#VU62739 - Improper Locking
CVE-2022-0897		 CWE-667 Medium
No
No
 - 03.05.2022 SB2022050304
SB2022050308
SB2022101708
and 8 more
#VU62398 - Improper input validation
CVE-2022-21476		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 69 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU62400 - Improper input validation
CVE-2022-21496		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU62401 - Improper input validation
CVE-2022-21434		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443		 CWE-20 Low
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU62081 - Type conversion
CVE-2022-28739		 CWE-704 High
No
No
 - 12.04.2022 SB2022041215
SB2022041404
SB2022060704
and 28 more
#VU59824 - Incorrect Regular Expression
CVE-2021-41817		 CWE-185 Medium
No
No
 - 19.01.2022 SB2022011919
SB2022011920
SB2022020413
and 24 more
#VU55489 - Improper Certificate Validation
CVE-2021-32066		 CWE-295 Medium
No
No
 - 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 28 more
#VU55488 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31810		 CWE-200 Medium
No
No
 - 02.08.2021 SB2021080209
SB2021080210
SB2021080913
and 27 more
#VU52796 - Command injection
CVE-2021-31799		 CWE-77 High
No
No
 - 03.05.2021 SB2021050306
SB2021052413
SB2021052414
and 27 more
#VU50978 - Missing release of memory after effective lifetime
CVE-2021-20193		 CWE-401 Medium
No
No
 - 28.02.2021 SB2021022807
SB2021022808
SB2021052630
and 9 more
#VU18058 - NULL Pointer Dereference
CVE-2019-9923		 CWE-476 Low
No
No
 - 22.03.2019 SB2019032204
SB2019041818
SB2021030306
and 10 more
#VU16782 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-20482		 CWE-835 Low
No
No
 - 02.01.2019 SB2018122607
SB2019010801
SB2019041818
and 8 more


Showing elements 2701 - 2720 out of 3006