Known vulnerabilities in Server Applications Module 15-SP7 - page 10

Vendor: SUSE
Software: Server Applications Module
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 232
Public exploits: 15
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Server Applications Module version 15-SP7 Server Applications Module 15-SP7 is affected by 232 vulnerabilities: 2 critical, 18 high, 146 medium, 66 low Critical High Medium Low

Vulnerabilities (232)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118158 - Type confusion
CVE-2025-47151		 CWE-843 High
No
No
 - 06.11.2025 SB2025110627
SB2025111275
SB2025111361
and 21 more
#VU117610 - Insufficient Verification of Data Authenticity
CVE-2025-40778		 CWE-345 Medium
Public exploit available
No
 - 23.10.2025 SB2025102373
SB2025102393
SB20251023133
and 60 more
#VU117604 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2025-40780		 CWE-337 Medium
No
No
 - 23.10.2025 SB2025102373
SB2025102393
SB20251023133
and 41 more
#VU117577 - Resource exhaustion
CVE-2025-8677		 CWE-400 Medium
No
No
 - 23.10.2025 SB2025102373
SB2025102393
SB20251023133
and 28 more
#VU117433 - Out-of-bounds read
CVE-2025-58148		 CWE-125 Medium
No
No
 - 21.10.2025 SB2025102166
SB2025102167
SB2025102242
and 11 more
#VU117432 - Out-of-bounds write
CVE-2025-58147		 CWE-787 Medium
No
No
 - 21.10.2025 SB2025102166
SB2025102167
SB2025102242
and 11 more
#VU117393 - Resource exhaustion
CVE-2025-48041		 CWE-400 Medium
No
No
 - 20.10.2025 SB2025102052
SB2025102180
SB2025102745
and 3 more
#VU117375 - Information Exposure Through Timing Discrepancy
CVE-2025-59432		 CWE-208 Medium
No
No
 - 20.10.2025 SB2025102016
SB2025102026
SB2025102027
and 6 more
#VU117357 - Externally-generated error message containing sensitive information
CVE-2025-62168		 CWE-211 Low
Public exploit available
No
 - 17.10.2025 SB2025101757
SB2025101803
SB2025101804
and 26 more
#VU116641 - Improper Authentication
CVE-2025-46818		 CWE-287 Medium
Public exploit available
No
 - 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 38 more
#VU116640 - Out-of-bounds read
CVE-2025-46819		 CWE-125 Medium
Public exploit available
No
 - 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 38 more
#VU116639 - Integer overflow
CVE-2025-46817		 CWE-190 High
Public exploit available
No
 - 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 45 more
#VU116638 - Stack-based buffer overflow
CVE-2025-59362		 CWE-121 Medium
No
No
 - 06.10.2025 SB2025100658
SB2025100659
SB2025100666
and 8 more
#VU116609 - Use After Free
CVE-2025-49844		 CWE-416 Medium
Public exploit available
No
 - 06.10.2025 SB2025100629
SB2025100633
SB2025100709
and 56 more
#VU116116 - Improper Resource Shutdown or Release
CVE-2024-55553		 CWE-404 Medium
No
No
 - 25.09.2025 SB2025092543
SB2025092554
SB2025092556
and 1 more
#VU114414 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-57804		 CWE-444 Low
No
No
 - 25.08.2025 SB2025082558
SB2025091298
SB2025091302
and 2 more
#VU114082 - Out-of-bounds read
CVE-2025-53859		 CWE-125 Low
No
No
 - 14.08.2025 SB2025081427
SB2025082564
SB2025082961
and 11 more
#VU113672 - Unchecked Return Value
CVE-2025-54571		 CWE-252 Medium
No
No
 - 06.08.2025 SB2025080617
SB20250816115
SB20250816119
and 40 more
#VU112440 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2025-3576		 CWE-327 Medium
No
No
 - 07.07.2025 SB2025070764
SB2025070769
SB2025070770
and 29 more
#VU103686 - Improper Authentication
CVE-2025-23419		 CWE-287 Low
No
No
 - 06.02.2025 SB2025020653
SB2025020670
SB2025020671
and 16 more


Showing elements 181 - 200 out of 232