Known vulnerabilities in Web and Scripting Module 15-SP4

Vendor: SUSE
Software: Web and Scripting Module
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 34
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Web and Scripting Module version 15-SP4 Web and Scripting Module 15-SP4 is affected by 34 vulnerabilities: 1 critical, 3 high, 25 medium, 5 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82070 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39333		 CWE-94 Low
No
No
 - 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 28 more
#VU82069 - Improper Validation of Integrity Check Value
CVE-2023-38552		 CWE-354 Medium
No
No
 - 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 34 more
#VU82066 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45143		 CWE-200 Medium
No
No
 - 17.10.2023 SB2023101702
SB2023101703
SB2023101801
and 31 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Public exploit available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81296 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-43655		 CWE-94 High
No
No
 - 29.09.2023 SB2023092947
SB2023092956
SB2023092957
and 13 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Public exploit available
No
 - 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU79335 - Permissions, Privileges, and Access Controls
CVE-2023-32559		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 39 more
#VU79334 - Permissions, Privileges, and Access Controls
CVE-2023-32006		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 38 more
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU78978 - Memory corruption
CVE-2023-3824		 CWE-119 Critical
Public exploit available
Exploited
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823		 CWE-611 High
No
No
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU77606 - Inconsistency Between Implementation and Documented Design
CVE-2023-30590		 CWE-1068 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-30589		 CWE-444 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 43 more
#VU77604 - Improper input validation
CVE-2023-30588		 CWE-20 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77601 - Untrusted Search Path
CVE-2023-30585		 CWE-426 Low
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 13 more
#VU77586 - Permissions, Privileges, and Access Controls
CVE-2023-30581		 CWE-264 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 31 more
#VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31147		 CWE-338 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 39 more
#VU76425 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-31130		 CWE-124 Low
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 55 more
#VU76423 - Improper input validation
CVE-2023-32067		 CWE-20 Medium
No
No
 - 23.05.2023 SB2023052312
SB2023053021
SB2023060711
and 35 more
#VU76422 - Improper input validation
CVE-2023-32067		 CWE-20 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more


Showing elements 1 - 20 out of 34