Approved changes feed: RSS · Atom

cpe:2.3:o:suse:suse_linux_enterprise_server:15:sp3:*:*:*:*:*:*

part: o version: 15 update: sp3

VendorSuse (ec535637-432e-5a38-96dd-4ec1e0138f73)
ProductSuse Linux Enterprise Server (84060f20-415e-515d-a3de-5586a69d6e5e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-21944 not_vulnerable 2026-06-08 05:40:03.395909 watchman: chown in watchman@.socket unit allows symlink attack
HIGH (7.8)
A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local attackers to escalate to root. This issue affects: openSUSE Backports SLE-15-SP3 watchman versions prior to 4.9.0. openSUSE Factory watchman versions prior to 4.9.0-9.1.
Published: 2022-01-26T09:10:09.842Z
Updated: 2024-09-16T16:43:44.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25315 not_vulnerable 2026-06-08 05:30:40.643794 salt-api unauthenticated remote code execution
CRITICAL (9.8)
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.
Published: 2021-03-03T09:55:16.356Z
Updated: 2024-09-16T21:03:45.719Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.