Known vulnerabilities in Web and Scripting Module 12 - page 2

Vendor: SUSE
Software: Web and Scripting Module
Version: 12
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 64
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Web and Scripting Module version 12 Web and Scripting Module 12 is affected by 64 vulnerabilities: 1 critical, 4 high, 45 medium, 14 low Critical High Medium Low

Vulnerabilities (64)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-27982		 CWE-444 Medium
No
No
 - 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 53 more
#VU88175 - Reachable Assertion
CVE-2024-27983		 CWE-617 Medium
Public exploit available
No
 - 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 56 more
#VU87185 - UNIX Symbolic Link (Symlink) Following
CVE-2023-6597		 CWE-61 Low
No
No
 - 07.03.2024 SB2024030718
SB2024030726
SB2024030727
and 88 more
#VU86733 - Improper input validation
CVE-2024-22025		 CWE-20 Medium
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 34 more
#VU86724 - Covert Timing Channel
CVE-2023-46809		 CWE-385 Medium
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 35 more
#VU86721 - Improper input validation
CVE-2024-22019		 CWE-20 Medium
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 48 more
#VU86718 - Improper Handling of Exceptional Conditions
CVE-2024-21892		 CWE-755 Low
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 30 more
#VU86709 - Exposure of sensitive information to an unauthorized actor
CVE-2024-24758		 CWE-200 Low
No
No
 - 22.02.2024 SB2024022211
SB2024022225
SB2024022832
and 13 more
#VU86707 - Server-Side Request Forgery (SSRF)
CVE-2024-24806		 CWE-918 Medium
No
No
 - 22.02.2024 SB2024022210
SB2024022214
SB2024022225
and 54 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 - 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU82070 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39333		 CWE-94 Low
No
No
 - 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 28 more
#VU82069 - Improper Validation of Integrity Check Value
CVE-2023-38552		 CWE-354 Medium
No
No
 - 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 34 more
#VU82066 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45143		 CWE-200 Medium
No
No
 - 17.10.2023 SB2023101702
SB2023101703
SB2023101801
and 31 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Public exploit available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80585 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41105		 CWE-22 Low
No
No
 - 11.09.2023 SB2023082825
SB2023100328
SB2023100362
and 18 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 - 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU79334 - Permissions, Privileges, and Access Controls
CVE-2023-32006		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 38 more
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU78978 - Memory corruption
CVE-2023-3824		 CWE-119 Critical
Public exploit available
Exploited
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823		 CWE-611 High
No
No
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more


Showing elements 21 - 40 out of 64