suse studio onsite

Name: suse studio onsite
Brand: suse

productUS

cpe:2.3:a:suse:studio_onsite:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical8high9medium0low

updated 2026-10-27

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-6271US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2014-09-24	= 1.3
CVE-2014-7169US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2014-09-25	= 1.3
CVE-2013-4547US	high7.5	67.7% (99th)	Exploit	no fix	2013-11-23	= 1.3
CVE-2016-5118US	critical9.8	50.0% (99th)	—	no fix	2016-06-10	= 1.3
CVE-2015-1283US	medium6.8	18.4% (97th)	—	no fix	2015-07-23	= 1.3
CVE-2016-0718US	critical9.8	13.3% (96th)	—	no fix	2016-05-26	= 1.3
CVE-2011-4315US	medium6.8	5.96% (93rd)	—	no fix	2011-12-08	= 1.2
CVE-2014-9846US	critical9.8	4.85% (92nd)	—	no fix	2017-03-20	= 1.3
CVE-2011-3180US	high7.5	2.58% (85th)	—	no fix	2014-04-16	= 1.2
CVE-2014-9844US	medium5.5	2.05% (81st)	—	no fix	2017-03-20	= 1.3
CVE-2016-2317US	medium5.5	2.01% (81st)	—	no fix	2017-02-03	= 1.3
CVE-2014-9845US	medium5.5	1.95% (80th)	—	no fix	2017-03-20	= 1.3
CVE-2016-2318US	medium5.5	1.88% (79th)	—	no fix	2017-02-03	= 1.3
CVE-2011-4195US	high7.5	1.88% (79th)	—	no fix	2014-04-16	= 1.2
CVE-2015-8808US	medium5.5	1.54% (75th)	—	no fix	2016-07-13	= 1.3
CVE-2011-4192US	high7.5	1.50% (74th)	—	no fix	2014-04-16	= 1.2
CVE-2013-3712US	high10.0	1.37% (72nd)	—	no fix	2014-02-26	6 versions
CVE-2011-0467US	high8.8	1.29% (70th)	—	1.0.3-0.18.1	2018-06-07	< 1.0.3-0.18.1
CVE-2017-14807US	high8.1	1.03% (63rd)	—	no fix	2020-01-27	= 1.3
CVE-2011-4193US	medium4.3	0.94% (61st)	—	no fix	2014-04-16	= 1.2
CVE-2013-3709US	high7.2	0.48% (41st)	—	no fix	2013-12-23	= 1.3
CVE-2017-14806US	medium5.9	0.44% (38th)	—	no fix	2020-01-27	= 1.3

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.