openSUSE openSUSE Leap 15.4

4 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-45153saphanabootstrap-formula – < 0.13.1+git.1667812208.4db963esaphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.slsHIGH 7.80.2 %
CVE-2023-22643libzypp-plugin-appdata – < 1.0.1+git.20180426libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` callsHIGH 7.82.4 %
CVE-2022-31254rmt-server – < 2.10rmt-server-pubcloud allows to escalate from user _rmt to rootHIGH 7.80.2 %
CVE-2022-31252permissions – < 20201225permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()MEDIUM 4.40.1 %