Known vulnerabilities in Web and Scripting Module 15-SP5 - page 2

Vendor: SUSE
Version: 15-SP5
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Total vulnerabilities: 68
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Web and Scripting Module version 15-SP5 Web and Scripting Module 15-SP5 is affected by 68 vulnerabilities: 1 critical, 6 high, 44 medium, 17 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88483 - Security Features
CVE-2024-2756
CWE-254 Low
No
No
- 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 24 more
#VU88178 - Insufficient Verification of Data Authenticity
CVE-2024-30261
CWE-345 Medium
No
No
- 05.04.2024 SB2024040527
SB2024041611
SB2024041618
and 12 more
#VU88177 - Exposure of sensitive information to an unauthorized actor
CVE-2024-30260
CWE-200 Low
No
No
- 05.04.2024 SB2024040527
SB2024041611
SB2024041618
and 11 more
#VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-27982
CWE-444 Medium
No
No
- 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 53 more
#VU88175 - Reachable Assertion
CVE-2024-27983
CWE-617 Medium
Public exploit available
No
- 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 56 more
#VU87510 - Improper input validation
CVE-2024-24549
CWE-20 Medium
Public exploit available
No
- 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU87509 - Resource exhaustion
CVE-2024-23672
CWE-400 Medium
No
No
- 13.03.2024 SB2024031386
SB2024032821
SB2024032824
and 49 more
#VU86733 - Improper input validation
CVE-2024-22025
CWE-20 Medium
No
No
- 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 34 more
#VU86728 - Inconsistency Between Implementation and Documented Design
CVE-2024-21890
CWE-1068 Low
No
No
- 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86726 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-21891
CWE-22 Medium
No
No
- 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86724 - Covert Timing Channel
CVE-2023-46809
CWE-385 Medium
No
No
- 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 35 more
#VU86723 - Improper Privilege Management
CVE-2024-22017
CWE-269 Low
No
No
- 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86722 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-21896
CWE-22 Medium
No
No
- 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86721 - Improper input validation
CVE-2024-22019
CWE-20 Medium
No
No
- 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 48 more
#VU86718 - Improper Handling of Exceptional Conditions
CVE-2024-21892
CWE-755 Low
No
No
- 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 30 more
#VU86709 - Exposure of sensitive information to an unauthorized actor
CVE-2024-24758
CWE-200 Low
No
No
- 22.02.2024 SB2024022211
SB2024022225
SB2024022832
and 13 more
#VU86707 - Server-Side Request Forgery (SSRF)
CVE-2024-24806
CWE-918 Medium
No
No
- 22.02.2024 SB2024022210
SB2024022214
SB2024022225
and 54 more
#VU86276 - Incorrect Default Permissions
CVE-2024-24821
CWE-276 Low
No
No
- 08.02.2024 SB2024020870
SB2024021508
SB2024022241
and 3 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794
CWE-749 Medium
No
No
- 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81800 - Resource Management Errors
CVE-2023-42795
CWE-399 Medium
No
No
- 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more


Showing elements 21 - 40 out of 68