Known vulnerabilities in SUSE Manager Server 4.2 - page 83

Vendor: SUSE
Software: SUSE Manager Server
Version: 4.2
Software CPE: cpe:2.3:o:suse:suse_manager_server:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3006
Public exploits: 100
Known exploited (KEV): 31
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Manager Server version 4.2 SUSE Manager Server 4.2 is affected by 3006 vulnerabilities: 15 critical, 362 high, 729 medium, 1900 low Critical High Medium Low

Vulnerabilities (3006)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73959 - Configuration
 CWE-16 Low
No
No
 - 22.03.2023 SB2023032240
#VU73897 - Configuration
 CWE-16 Low
No
No
 - 21.03.2023 SB2023032159
#VU73895 - Permissions, Privileges, and Access Controls
CVE-2022-42334		 CWE-264 Low
No
No
 - 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 11 more
#VU73894 - Permissions, Privileges, and Access Controls
CVE-2022-42333		 CWE-264 Low
No
No
 - 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 11 more
#VU73893 - Use After Free
CVE-2022-42332		 CWE-416 Medium
No
No
 - 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 12 more
#VU73892 - Processor optimization removal or modification of security-critical code
CVE-2022-42331		 CWE-1037 Medium
No
No
 - 21.03.2023 SB2023032151
SB2023032161
SB2023032163
and 12 more
#VU73788 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-14394		 CWE-835 Medium
No
No
 - 17.03.2023 SB2023031732
SB2023031735
SB2023032138
and 7 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Public exploit available
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-27522		 CWE-113 Medium
No
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 33 more
#VU72618 - Improper input validation
CVE-2023-24329		 CWE-20 Medium
No
No
 - 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU72308 - Use After Free
CVE-2022-1050		 CWE-416 High
No
No
 - 15.02.2023 SB2023021578
SB2023030828
SB2023031735
and 8 more
#VU71585 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 - 26.01.2023 SB2023012653
SB2023032944
SB2023041866
and 5 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Public exploit available
No
 - 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70330 - Uncontrolled Recursion
CVE-2022-23516		 CWE-674 Medium
No
No
 - 14.12.2022 SB2022121431
SB2023032922
SB2023050806
and 1 more
#VU70329 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23515		 CWE-79 Low
No
No
 - 14.12.2022 SB2022121431
SB2023032922
SB2023050806
and 1 more
#VU70328 - Resource exhaustion
CVE-2022-23514		 CWE-400 Medium
No
No
 - 14.12.2022 SB2022121431
SB2023032922
SB2023050806
#VU69283 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 - 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more
#VU68551 - Use After Free
CVE-2022-0216		 CWE-416 Medium
No
No
 - 20.10.2022 SB2022102077
SB2022102082
SB2022102091
and 12 more
#VU64570 - Use After Free
CVE-2021-3929		 CWE-416 Medium
No
No
 - 21.06.2022 SB2022062122
SB2022062124
SB2023031735
and 6 more
#VU64569 - Heap-based Buffer Overflow
CVE-2021-3507		 CWE-122 Medium
No
No
 - 21.06.2022 SB2021050640
SB2022062124
SB2022102676
and 9 more


Showing elements 1641 - 1660 out of 3006