Known vulnerabilities in SUSE Manager Tools

Vendor: SUSE
Software: SUSE Manager Tools
Software CPE: cpe:2.3:o:suse:suse_manager_tools:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 60
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Manager Tools SUSE Manager Tools is affected by 60 known vulnerabilities: 10 high, 25 medium, 25 low Critical High Medium Low

Vulnerabilities (60)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72132 - Improper Authentication
CVE-2022-39229		 CWE-287 Low
No
No
 - 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 13 more
#VU72131 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39201		 CWE-200 Medium
No
No
 - 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 12 more
#VU72130 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31130		 CWE-200 Medium
No
No
 - 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 11 more
#VU72128 - Improper Verification of Cryptographic Signature
CVE-2022-31123		 CWE-347 Medium
No
No
 - 11.02.2023 SB2023021201
SB2023021202
SB2023021203
and 15 more
#VU69485 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39307		 CWE-200 Medium
No
No
 - 22.11.2022 SB2022112220
SB2023021202
SB2023021203
and 12 more
#VU69484 - Improper input validation
CVE-2022-39306		 CWE-20 Medium
No
No
 - 22.11.2022 SB2022112220
SB2023021202
SB2023021203
and 12 more
#VU68336 - UNIX Symbolic Link (Symlink) Following
CVE-2019-3698		 CWE-61 Low
No
No
 - 14.10.2022 SB2022101445
SB2024051429
SB2024061808
#VU65354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31097		 CWE-79 Low
No
No
 - 15.07.2022 SB2022071510
SB2022102094
SB2022102641
and 16 more
#VU65353 - Improper Authentication
CVE-2022-31107		 CWE-287 High
No
No
 - 15.07.2022 SB2022071510
SB2022072642
SB2022072643
and 21 more
#VU64660 - Improper Authentication
CVE-2022-22967		 CWE-287 Low
No
No
 - 24.06.2022 SB2022062428
SB2022062430
SB2022062441
and 13 more
#VU57422 - Information Exposure Through an Error Message
CVE-2021-3620		 CWE-209 Low
No
No
 - 19.10.2021 SB2021101903
SB2021101904
SB2021101905
and 10 more
#VU54626 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3583		 CWE-94 High
No
No
 - 08.07.2021 SB2021070822
SB2021070823
SB2021071517
and 12 more
#VU54520 - Improper input validation
CVE-2020-14343		 CWE-20 High
Available
No
 - 04.07.2021 SB2021070403
SB2021070404
SB2022042259
and 17 more
#VU52984 - Information Exposure Through Log Files
CVE-2021-3447		 CWE-532 Low
No
No
 - 10.05.2021 SB2021040180
SB2021051001
SB2021072616
and 13 more
#VU50936 - Information Exposure Through Log Files
CVE-2021-20191		 CWE-532 Low
No
No
 - 25.02.2021 SB2021022511
SB2021022512
SB2021022513
and 11 more
#VU50818 - Information Exposure Through Log Files
CVE-2021-20228		 CWE-532 Low
No
No
 - 22.02.2021 SB2021022203
SB2021022205
SB2021022512
and 7 more
#VU50429 - Information Exposure Through Log Files
CVE-2021-20180		 CWE-532 Low
No
No
 - 09.02.2021 SB2021020903
SB2021020904
SB2021022512
and 11 more
#VU50428 - Information Exposure Through Log Files
CVE-2021-20178		 CWE-532 Low
No
No
 - 09.02.2021 SB2021020903
SB2021020904
SB2021022512
and 10 more
#VU25823 - Improper input validation
CVE-2020-1747		 CWE-20 High
No
No
 - 09.03.2020 SB2020030903
SB2020041201
SB2020051129
and 21 more
#VU1344 - UNIX Symbolic Link (Symlink) Following
CVE-2016-9566		 CWE-61 Low
Available
No
 - 16.12.2016 SB2016121601
SB2016123102
SB2022101445
and 2 more


Showing elements 1 - 20 out of 60