Known vulnerabilities in SUSE Manager Server Module - page 3

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:suse_manager_server_module:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Manager Server Module SUSE Manager Server Module is affected by 53 known vulnerabilities: 7 high, 32 medium, 14 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80472 - Permissions, Privileges, and Access Controls
CVE-2023-20898
CWE-264 Low
No
No
- 05.09.2023 SB2023090559
SB2023090563
SB2023090601
and 13 more
#VU80471 - Improper input validation
CVE-2023-20897
CWE-20 Medium
No
No
- 05.09.2023 SB2023090559
SB2023090563
SB2023090601
and 14 more
#VU76397 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-28370
CWE-601 Medium
No
No
- 22.05.2023 SB2023052204
SB2023061333
SB2023062257
and 28 more
#VU72686 - Resource exhaustion
CVE-2022-41723
CWE-400 Medium
No
No
- 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU71586 - Out-of-bounds write
CVE-2022-40152
CWE-787 Medium
No
No
- 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU71585 - Out-of-bounds write
CVE-2022-40151
CWE-787 Medium
No
No
- 26.01.2023 SB2023012653
SB2023032944
SB2023041866
and 5 more
#VU71412 - Configuration
CVE-2023-22742
CWE-16 Low
No
No
- 22.01.2023 SB2023012216
SB2023032438
SB2023040667
and 4 more
#VU70527 - Improper input validation
CVE-2022-41966
CWE-20 Medium
Available
No
- 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU69691 - Use of Password Hash Instead of Password for Authentication
CVE-2022-46146
CWE-836 Low
No
No
- 29.11.2022 SB2022112926
SB2022113012
SB2023022044
and 33 more
#VU69283 - Out-of-bounds write
CVE-2022-40151
CWE-787 Medium
No
No
- 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more
#VU68897 - Resource exhaustion
CVE-2022-32149
CWE-400 Medium
No
No
- 01.11.2022 SB2022110139
SB2022110140
SB2022110142
and 68 more
#VU68390 - Resource exhaustion
CVE-2022-41715
CWE-400 Medium
No
No
- 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550
CWE-94 Medium
No
No
- 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more


Showing elements 41 - 60 out of 53