Known vulnerabilities in Galera for Ericsson 15

Vendor: SUSE
Software: Galera for Ericsson 15
Software CPE: cpe:2.3:o:suse:galera_for_ericsson_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 28
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Galera for Ericsson 15 Galera for Ericsson 15 is affected by 28 known vulnerabilities: 1 critical, 3 high, 13 medium, 11 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128347 - Heap-based Buffer Overflow
CVE-2026-32710		 CWE-122 Medium
No
No
 - 28.04.2026 SB2026042874
SB20260428163
#VU121008 - Insecure Automated Optimizations
CVE-2023-52971		 CWE-1038 Low
No
No
 - 07.01.2026 SB2025122915
SB2026010703
SB2026010704
and 5 more
#VU120623 - Insecure Automated Optimizations
CVE-2023-52970		 CWE-1038 Low
No
No
 - 29.12.2025 SB2025122915
SB2025122918
SB2025122926
and 12 more
#VU120622 - Insecure Automated Optimizations
CVE-2023-52969		 CWE-1038 Low
No
No
 - 29.12.2025 SB2025122915
SB2025122918
SB2025122920
and 16 more
#VU118851 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-13699		 CWE-22 High
No
No
 - 01.12.2025 SB2025120126
SB2025121762
SB2025121943
and 31 more
#VU118520 - Integer overflow
CVE-2025-12818		 CWE-190 Medium
No
No
 - 13.11.2025 SB2025111368
SB2025112204
SB2025112205
and 64 more
#VU118519 - Missing Authorization
CVE-2025-12817		 CWE-862 Low
No
No
 - 13.11.2025 SB2025111368
SB2025112204
SB2025112205
and 49 more
#VU114096 - Improper input validation
CVE-2025-8715		 CWE-20 Medium
No
No
 - 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 52 more
#VU114095 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8714		 CWE-94 Low
Available
No
 - 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 60 more
#VU114094 - Permissions, Privileges, and Access Controls
CVE-2025-8713		 CWE-264 Low
No
No
 - 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 32 more
#VU108834 - Buffer over-read
CVE-2025-4207		 CWE-126 Medium
No
No
 - 09.05.2025 SB2025050920
SB2025051669
SB20250521157
and 38 more
#VU107533 - Improper input validation
CVE-2025-30722		 CWE-20 Medium
No
No
 - 16.04.2025 SB20250416139
SB20250416141
SB2025042536
and 18 more
#VU107534 - Improper input validation
CVE-2025-30693		 CWE-20 Medium
No
No
 - 16.04.2025 SB20250416139
SB20250416141
SB2025042536
and 18 more
#VU103970 - Improper input validation
CVE-2025-1094		 CWE-20 Critical
Available
Exploited
 - 14.02.2025 SB2025021408
SB2025022038
SB2025022039
and 78 more
#VU103188 - Improper input validation
CVE-2025-21490		 CWE-20 Medium
No
No
 - 21.01.2025 SB2025012217
SB2025013052
SB2025020602
and 21 more
#VU100514 - Improper Authorization
CVE-2024-10979		 CWE-285 High
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 65 more
#VU100513 - Incorrect Privilege Assignment
CVE-2024-10978		 CWE-266 Medium
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 46 more
#VU100512 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-10977		 CWE-300 Low
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 34 more
#VU100511 - Improper Privilege Management
CVE-2024-10976		 CWE-269 Medium
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 47 more
#VU95605 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-7348		 CWE-367 Low
No
No
 - 08.08.2024 SB2024080866
SB2024080954
SB2024080955
and 63 more


Showing elements 1 - 20 out of 28