Suse Vulnérabilités

Chronologie

Taper

Produit

SuSE Linux82
SuSE Linux Enterprise Server23
SUSE Rancher14
SUSE Linux Enterprise Server7
SUSE Manager Server6

Contre-mesures

Official Fix125
Temporary Fix0
Workaround1
Unavailable0
Not Defined64

Exploitabilité

High3
Functional0
Proof-of-Concept19
Unproven1
Not Defined167

Vecteur d'accès

Not Defined0
Physical0
Local87
Adjacent7
Network96

Authentification

Not Defined0
High4
Low71
None115

Interaction de l'utilisateur

Not Defined0
Required6
None184

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤422
≤511
≤642
≤724
≤848
≤918
≤1024

CVSSv3 Temp

≤10
≤20
≤33
≤420
≤516
≤638
≤736
≤841
≤920
≤1016

VulDB

≤10
≤20
≤34
≤423
≤514
≤650
≤720
≤843
≤911
≤1025

NVD

≤10
≤20
≤31
≤44
≤54
≤67
≤75
≤820
≤913
≤108

CNA

≤10
≤20
≤32
≤45
≤56
≤67
≤74
≤816
≤913
≤105

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k0
<5k25
<10k54
<25k95
<50k15
<100k1
≥100k0

Exploiter aujourd'hui

<1k136
<2k11
<5k24
<10k16
<25k3
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (51): CaaS Platform (3), Enterprise Storage (1), Leap (2), Linux (83), Linux Enterprise (5), Linux Enterprise Debuginfo (2), Linux Enterprise Desktop (3), Linux Enterprise High Performance Computing (1), Linux Enterprise Module for Desktop Applications (2), Linux Enterprise Module for Legacy Software (2), Linux Enterprise Module for Public Cloud (1), Linux Enterprise Module for SAP Applications (1), Linux Enterprise Module for SUSE Manager Server (4), Linux Enterprise Module for Server Applications (1), Linux Enterprise Point of Sale (1), Linux Enterprise Server (30), Linux Enterprise Server 15 (4), Linux Enterprise Server for SAP (4), Linux Enterprise Software Development Kit (3), Linux SMT (3), Longhorn (2), Manager (1), Manager Proxy (1), Manager Retail Branch Server (1), Manager Server (7), Manager Server Module (1), Open Build Service (4), OpenStack Cloud (1), OpenStack Cloud Crowbar (4), OpenSuSE OSC (1), Openstack Cloud (2), Portus (1), Rancher (14), Rancher Desktop (1), Repository Mirroring Tool (1), SUSE Linux Enterprise Module for Development Tools (1), Studio Extension for System z (3), Studio Onsite (2), Uyuni (1), WebYaST (2), YaST (1), YaST Online Update (1), gcab (1), kiwi (1), kubewarden-controller (1), openSUSE (6), openSUSE Backports (1), openSUSE Factory (3), openSUSE Factory Leap (1), openSUSE Leap (6), yast2-backup (1)

Link to Vendor Website: https://www.suse.com/

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
20/09/20234.24.2SUSE Manager Server Module divulgation de l'informationInconnueNot DefinedOfficial Fix0.000430.04CVE-2023-22644
19/09/20236.36.3SUSE Linux Enterprise Desktop/openSUSE Leap elévation de privilègesOperating SystemNot DefinedOfficial Fix0.000430.00CVE-2023-32182
01/06/20235.45.3SUSE Rancher cross site scriptingInconnueNot DefinedOfficial Fix0.000500.00CVE-2022-43760
01/06/20238.18.0SUSE Rancher elévation de privilègesInconnueNot DefinedOfficial Fix0.000430.02CVE-2023-22647
01/06/20238.38.1SUSE Rancher Azure AD elévation de privilègesInconnueNot DefinedOfficial Fix0.000500.03CVE-2023-22648
19/04/20238.07.9SuSE kubewarden-controller elévation de privilègesInconnueNot DefinedOfficial Fix0.000670.04CVE-2023-22645
15/02/20237.47.3SUSE Linux Enterprise Module for SAP Applications saphanabootstrap-formula elévation de privilègesOperating SystemNot DefinedOfficial Fix0.000420.06CVE-2022-45153
15/02/20234.74.7SUSE Linux Enterprise Server Support Log chiffrement faibleOperating SystemNot DefinedNot Defined0.000430.00CVE-2022-45154
07/02/20238.38.1SUSE Linux Enterprise Server/Manager Server rmt-server-regsharing Service elévation de privilègesOperating SystemNot DefinedOfficial Fix0.000420.00CVE-2022-31254
10/11/20223.53.5SUSE Linux Enterprise Module for SUSE Manager Server cross site scriptingOperating SystemNot DefinedOfficial Fix0.000610.00CVE-2022-43754
10/11/20224.34.2SUSE Linux Enterprise Module for SUSE Manager Server directory traversalOperating SystemNot DefinedOfficial Fix0.001030.00CVE-2022-43753
10/11/20224.34.2SUSE Linux Enterprise Module for SUSE Manager Server directory traversalOperating SystemNot DefinedOfficial Fix0.000930.00CVE-2022-31255
26/10/20226.96.9SUSE openSUSE Factory Sendmail elévation de privilègesInconnueNot DefinedOfficial Fix0.000420.00CVE-2022-31256
06/10/20224.94.9SUSE Linux Enterprise Server Group elévation de privilègesOperating SystemNot DefinedNot Defined0.000420.00CVE-2022-31252
07/09/20227.57.5SUSE Rancher elévation de privilègesInconnueNot DefinedOfficial Fix0.000960.04CVE-2022-31247
07/09/20226.96.8SUSE Rancher API Endpoint divulgation de l'informationInconnueNot DefinedOfficial Fix0.000870.00CVE-2021-36783
07/09/20226.96.8SUSE Rancher Kubernetes API chiffrement faibleInconnueNot DefinedOfficial Fix0.000960.00CVE-2021-36782
22/06/20226.46.3SUSE Manager Server spacewalk-java dénie de serviceInconnueNot DefinedOfficial Fix0.001280.00CVE-2022-21952
22/06/20225.35.2SUSE Manager Server spacewalk-java divulgation de l'informationInconnueNot DefinedOfficial Fix0.001830.00CVE-2022-31248
25/05/20225.25.2SUSE Rancher chiffrement faibleInconnueNot DefinedOfficial Fix0.000700.00CVE-2022-21951
03/05/20227.57.4SuSE Open Build Service XML External EntityInconnueNot DefinedOfficial Fix0.002130.00CVE-2022-21949
02/05/20225.95.7SUSE Rancher Catalog elévation de privilègesInconnueNot DefinedOfficial Fix0.000720.00CVE-2021-4200
02/05/20227.27.0SUSE Rancher elévation de privilègesInconnueNot DefinedOfficial Fix0.000870.00CVE-2021-36784
02/05/20226.36.2SUSE Rancher divulgation de l'informationInconnueNot DefinedOfficial Fix0.001500.00CVE-2021-36778
04/04/20227.57.4SUSE Rancher elévation de privilègesInconnueNot DefinedOfficial Fix0.002250.00CVE-2021-36776

165 plus d'entrées ne sont pas affichées

Might our Artificial Intelligence support you?

Check our Alexa App!