Known vulnerabilities in Web and Scripting Module 15-SP5 - page 3

Vendor: SUSE
Software: Web and Scripting Module
Version: 15-SP5
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 68
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Web and Scripting Module version 15-SP5 Web and Scripting Module 15-SP5 is affected by 68 vulnerabilities: 1 critical, 6 high, 44 medium, 17 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86574 - Incorrect Default Permissions
CVE-2024-22029		 CWE-276 Low
No
No
 - 19.02.2024 SB2024021927
SB2024021928
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 - 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU82070 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39333		 CWE-94 Low
No
No
 - 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 28 more
#VU82069 - Improper Validation of Integrity Check Value
CVE-2023-38552		 CWE-354 Medium
No
No
 - 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 34 more
#VU82066 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45143		 CWE-200 Medium
No
No
 - 17.10.2023 SB2023101702
SB2023101703
SB2023101801
and 31 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 - 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Public exploit available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81296 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-43655		 CWE-94 High
No
No
 - 29.09.2023 SB2023092947
SB2023092956
SB2023092957
and 13 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Public exploit available
No
 - 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU79335 - Permissions, Privileges, and Access Controls
CVE-2023-32559		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 39 more
#VU79334 - Permissions, Privileges, and Access Controls
CVE-2023-32006		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 38 more
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU78978 - Memory corruption
CVE-2023-3824		 CWE-119 Critical
Public exploit available
Exploited
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823		 CWE-611 High
No
No
 - 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31147		 CWE-338 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 39 more
#VU76425 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-31130		 CWE-124 Low
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 55 more
#VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31124		 CWE-338 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 33 more
#VU76423 - Improper input validation
CVE-2023-32067		 CWE-20 Medium
No
No
 - 23.05.2023 SB2023052312
SB2023053021
SB2023060711
and 35 more
#VU76422 - Improper input validation
CVE-2023-32067		 CWE-20 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 - 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more


Showing elements 41 - 60 out of 68