Known vulnerabilities in Public Cloud Module 15-SP4 - page 4

Vendor: SUSE
Software: Public Cloud Module
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:public_cloud_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 341
Public exploits: 23
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Public Cloud Module version 15-SP4 Public Cloud Module 15-SP4 is affected by 341 vulnerabilities: 15 high, 134 medium, 192 low Critical High Medium Low

Vulnerabilities (341)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123562 - Asymmetric Resource Consumption (Amplification)
CVE-2025-68480		 CWE-405 Medium
No
No
 - 05.03.2026 SB2026030523
SB2026030527
SB2026030633
and 2 more
#VU123468 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-1703		 CWE-22 Low
No
No
 - 03.03.2026 SB2026030336
SB2026030337
SB2026030338
and 8 more
#VU123116 - Uncontrolled Recursion
CVE-2026-0994		 CWE-674 Medium
No
No
 - 20.02.2026 SB2026022039
SB2026022040
SB2026022041
and 25 more
#VU122976 - Type conversion
CVE-2025-12781		 CWE-704 Low
No
No
 - 17.02.2026 SB2026021706
SB2026021715
SB2026021716
and 4 more
#VU122819 - Command injection
CVE-2025-15367		 CWE-77 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 56 more
#VU122818 - Command injection
CVE-2025-15366		 CWE-77 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 52 more
#VU122816 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-15282		 CWE-93 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU122815 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-0865		 CWE-444 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 49 more
#VU122814 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-0672		 CWE-93 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 29 more
#VU122813 - Improper input validation
CVE-2025-11468		 CWE-20 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU122270 - Resource exhaustion
CVE-2026-23490		 CWE-400 Medium
No
No
 - 03.02.2026 SB2026020365
SB2026020366
SB2026020370
and 51 more
#VU121929 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24049		 CWE-22 Medium
Public exploit available
No
 - 22.01.2026 SB2026012210
SB2026012503
SB2026012761
and 20 more
#VU121279 - Deserialization of Untrusted Data
CVE-2026-21226		 CWE-502 Medium
No
No
 - 13.01.2026 SB2026011399
SB2026020642
SB2026020977
and 8 more
#VU120998 - Resource exhaustion
CVE-2025-69229		 CWE-400 Medium
No
No
 - 06.01.2026 SB2026010643
SB2026012919
SB20260216150
and 10 more
#VU120996 - Resource exhaustion
CVE-2025-69228		 CWE-400 Medium
No
No
 - 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU119238 - Inefficient Algorithmic Complexity
CVE-2025-12084		 CWE-407 Low
No
No
 - 06.12.2025 SB2025120606
SB20251226352
SB2025123104
and 48 more
#VU119234 - Resource exhaustion
CVE-2025-13837		 CWE-400 Medium
No
No
 - 06.12.2025 SB2025120603
SB20251226352
SB2025123104
and 13 more
#VU119233 - Resource exhaustion
CVE-2025-13836		 CWE-400 Medium
No
No
 - 06.12.2025 SB2025120602
SB20251226352
SB2025123104
and 36 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more


Showing elements 61 - 80 out of 341