Known vulnerabilities in SUSE OpenStack Cloud Crowbar 8 - page 3

Vendor: SUSE
Version: 8
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud_crowbar:*:*:*:*:*:*:*:*
Total vulnerabilities: 799
Public exploits: 40
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud Crowbar version 8 SUSE OpenStack Cloud Crowbar 8 is affected by 799 vulnerabilities: 10 critical, 218 high, 288 medium, 283 low Critical High Medium Low

Vulnerabilities (799)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68961 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-27777
CWE-79 Low
No
No
- 03.11.2022 SB2022110317
SB2022110319
SB2022110320
and 2 more
#VU68860 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31163
CWE-22 Medium
No
No
- 31.10.2022 SB2022103147
SB2022103161
SB2022072942
and 6 more
#VU68855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39348
CWE-79 Low
No
No
- 31.10.2022 SB2022103137
SB20221115106
SB2022111743
and 12 more
#VU67588 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1734
CWE-78 High
No
No
- 22.09.2022 SB2022092241
SB2022092242
SB2020041808
and 1 more
#VU67555 - Incorrect Regular Expression
CVE-2022-40023
CWE-185 Medium
No
No
- 21.09.2022 SB2022092139
SB2022092141
SB2022102426
and 20 more
#VU66814 - Improper Access Control
CVE-2021-44225
CWE-284 Low
No
No
- 29.08.2022 SB2021112614
SB2022082931
SB2022083038
and 9 more
#VU66704 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-32209
CWE-79 Low
No
No
- 23.08.2022 SB2022082304
SB2022082309
SB2022082429
and 4 more
#VU66201 - Security Features
CVE-2022-2255
CWE-254 Medium
No
No
- 09.08.2022 SB2022080904
SB2022080914
SB2022111643
and 6 more
#VU64905 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-34265
CWE-89 High
Public exploit available
No
- 04.07.2022 SB2022070425
SB2022070438
SB2022080147
and 8 more
#VU64862 - Improper input validation
CVE-2022-30122
CWE-20 Medium
No
No
- 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 8 more
#VU62050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28346
CWE-89 High
Public exploit available
No
- 11.04.2022 SB2022041110
SB2022041125
SB2022041126
and 14 more
#VU61798 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24790
CWE-444 Medium
No
No
- 01.04.2022 SB2022040112
SB2022052603
SB2022092241
and 12 more
#VU61488 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24761
CWE-444 Medium
No
No
- 21.03.2022 SB2022032107
SB2022040525
SB2022040622
and 12 more
#VU58824 - Improper input validation
CVE-2021-44716
CWE-20 Medium
No
No
- 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU57320 - Improper Access Control
CVE-2021-39226
CWE-284 Medium
Public exploit available
Exploited
- 12.10.2021 SB2021101262
SB2021101320
SB2021101321
and 22 more
#VU28793 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-13757
CWE-327 Medium
No
No
- 08.06.2020 SB2020060820
SB2020081913
SB2020090110
and 11 more
#VU26356 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10109
CWE-444 Medium
No
No
- 24.03.2020 SB2020031234
SB2020032419
SB2020043028
and 8 more
#VU26355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10108
CWE-444 Medium
No
No
- 24.03.2020 SB2020031234
SB2020032419
SB2020043012
and 11 more
#VU24218 - Improper input validation
CVE-2019-11287
CWE-20 Medium
No
No
- 13.01.2020 SB2019112307
SB2020011311
SB2021062428
and 5 more
#VU31043 - Improper input validation
CVE-2019-12387
CWE-20 Medium
No
No
- 10.06.2019 SB2019061006
SB2019072125
SB2019072129
and 4 more


Showing elements 41 - 60 out of 799