Known vulnerabilities in SUSE Package Hub for SUSE Linux Enterprise

Vendor: SUSE
Software: SUSE Package Hub for SUSE Linux Enterprise
Software CPE: cpe:2.3:a:suse:suse_package_hub_for_suse_linux_enterprise:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 204
Public exploits: 20
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Package Hub for SUSE Linux Enterprise SUSE Package Hub for SUSE Linux Enterprise is affected by 204 known vulnerabilities: 2 critical, 83 high, 57 medium, 62 low Critical High Medium Low

Vulnerabilities (204)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47532 - Improper input validation
CVE-2020-25829		 CWE-20 Medium
No
No
 - 13.10.2020 SB2020101312
SB2020101606
SB2020101711
and 5 more
#VU47490 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-26935		 CWE-89 Medium
No
No
 - 10.10.2020 SB2020101001
SB2020101610
SB2020101611
and 7 more
#VU47489 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26934		 CWE-79 Low
No
No
 - 10.10.2020 SB2020101001
SB2020101610
SB2020101611
and 7 more
#VU47123 - Exposure of sensitive information to an unauthorized actor
CVE-2020-17482		 CWE-200 Medium
No
No
 - 28.09.2020 SB2020092803
SB2020092805
SB2020092806
and 7 more
#VU45986 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-24368		 CWE-22 Medium
No
No
 - 24.08.2020 SB2020082411
SB2020082412
SB2020101608
and 2 more
#VU31874 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-14295		 CWE-89 Medium
Available
No
 - 26.07.2020 SB2020072602
SB2020072603
SB1970010101
and 7 more
#VU29577 - Improper Access Control
CVE-2020-14196		 CWE-284 Medium
No
No
 - 08.07.2020 SB2020070802
SB2020070803
SB2020071905
and 8 more
#VU29531 - Improper input validation
CVE-2020-13625		 CWE-20 Low
No
No
 - 06.07.2020 SB2020070602
SB2020072602
SB2020072603
and 10 more
#VU30255 - Improper input validation
CVE-2020-14147		 CWE-20 Medium
No
No
 - 15.06.2020 SB2020061528
SB2020072308
SB2020072309
and 4 more
#VU28143 - Out-of-bounds read
CVE-2020-10030		 CWE-125 Low
No
No
 - 20.05.2020 SB2020052032
SB2020052306
SB2020052307
and 5 more
#VU28142 - Improper input validation
CVE-2020-12244		 CWE-20 Medium
No
No
 - 20.05.2020 SB2020052032
SB2020052101
SB2020052222
and 7 more
#VU28141 - Improper input validation
CVE-2020-10995		 CWE-20 Medium
No
No
 - 20.05.2020 SB2020052032
SB2020052101
SB2020052222
and 7 more
#VU27958 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-8155		 CWE-79 Low
No
No
 - 18.05.2020 SB2020051801
SB2020051802
SB2020051803
and 1 more
#VU27957 -
CVE-2020-8154		 Medium
No
No
 - 18.05.2020 SB2020051801
SB2020051802
SB2020051803
and 1 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 - 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27394 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2009-4112		 CWE-78 Low
Available
No
 - 28.04.2020 SB2009113001
SB2020043036
SB2020042875
and 3 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU36232 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20723		 CWE-79 Low
No
No
 - 16.01.2019 SB2019011620
SB2020043036
SB2020042875
and 5 more
#VU36233 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20724		 CWE-79 Low
No
No
 - 16.01.2019 SB2019011620
SB2020043036
SB2020042875
and 5 more
#VU36234 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20725		 CWE-79 Low
No
No
 - 16.01.2019 SB2019011620
SB2020043036
SB2020042875
and 5 more


Showing elements 1 - 20 out of 204