Known vulnerabilities in Server Applications Module 15-SP7

Vendor: SUSE
Software: Server Applications Module
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 232
Public exploits: 15
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Server Applications Module version 15-SP7 Server Applications Module 15-SP7 is affected by 232 vulnerabilities: 2 critical, 18 high, 146 medium, 66 low Critical High Medium Low

Vulnerabilities (232)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139214 - Improper input validation
CVE-2026-10723		 CWE-20 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 1 more
#VU139213 - Improper input validation
CVE-2026-10822		 CWE-20 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 1 more
#VU139212 - Improper Check or Handling of Exceptional Conditions
CVE-2026-11331		 CWE-703 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 1 more
#VU139211 - Resource exhaustion
CVE-2026-11605		 CWE-400 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
#VU139210 - Resource exhaustion
CVE-2026-11622		 CWE-400 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 1 more
#VU139209 - Improper input validation
CVE-2026-11721		 CWE-20 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 1 more
#VU139208 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-12617		 CWE-754 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 1 more
#VU139207 - Reachable Assertion
CVE-2026-13204		 CWE-617 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 1 more
#VU139206 - Improper input validation
CVE-2026-13321		 CWE-20 Low
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 1 more
#VU139071 - Use After Free
CVE-2026-63639		 CWE-416 Medium
No
No
 - 22.07.2026 SB2026072221
SB2026072271
SB2026072272
and 2 more
#VU139070 - Use After Free
CVE-2026-56684		 CWE-416 Medium
No
No
 - 22.07.2026 SB2026072221
SB2026072271
SB2026072272
and 2 more
#VU134864 - Out-of-bounds read
CVE-2026-48142		 CWE-125 Medium
No
No
 - 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 9 more
#VU134861 - Heap-based Buffer Overflow
CVE-2026-42055		 CWE-122 High
No
No
 - 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 11 more
#VU133904 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-42535		 CWE-22 Low
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 11 more
#VU133905 - Heap-based Buffer Overflow
CVE-2026-34356		 CWE-122 High
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 14 more
#VU133906 - Buffer overflow
CVE-2026-34355		 CWE-120 Medium
No
No
 - 08.06.2026 SB2026060493
SB20260624100
SB20260624101
and 12 more
#VU133907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-29170		 CWE-79 Medium
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 11 more
#VU133908 - Use After Free
CVE-2026-29167		 CWE-416 Low
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 10 more
#VU131864 - Out-of-bounds read
CVE-2026-43964		 CWE-125 Medium
No
No
 - 19.05.2026 SB2026051936
SB2026051940
SB2026051941
and 15 more
#VU131788 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-44172		 CWE-89 Medium
No
No
 - 19.05.2026 SB2026051914
SB20260717103
SB20260721154
and 2 more


Showing elements 1 - 20 out of 232