Known vulnerabilities in Server Applications Module 15-SP7 - page 6

Vendor: SUSE
Software: Server Applications Module
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 232
Public exploits: 15
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Server Applications Module version 15-SP7 Server Applications Module 15-SP7 is affected by 232 vulnerabilities: 2 critical, 18 high, 146 medium, 66 low Critical High Medium Low

Vulnerabilities (232)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128347 - Heap-based Buffer Overflow
CVE-2026-32710		 CWE-122 Medium
No
No
 - 28.04.2026 SB2026042874
SB20260428163
#VU128026 - Improper Neutralization
CVE-2025-67733		 CWE-707 Medium
No
No
 - 27.04.2026 SB2026042756
SB2026042759
SB2026042760
and 10 more
#VU128025 - Out-of-bounds read
CVE-2026-21863		 CWE-125 Medium
No
No
 - 27.04.2026 SB2026042756
SB2026042759
SB2026042760
and 10 more
#VU125777 - Incorrect Authorization
CVE-2026-28808		 CWE-863 High
No
No
 - 10.04.2026 SB2026041031
SB2026041046
SB2026041047
and 5 more
#VU125775 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-23941		 CWE-444 High
No
No
 - 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 6 more
#VU125774 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-23942		 CWE-22 Low
No
No
 - 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 6 more
#VU125773 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-23943		 CWE-409 Medium
No
No
 - 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 5 more
#VU125772 - Relative Path Traversal
CVE-2026-21620		 CWE-23 Low
No
No
 - 10.04.2026 SB2026041021
SB2026041023
SB2026041024
and 6 more
#VU124616 - Resource exhaustion
CVE-2026-1519		 CWE-400 Medium
No
No
 - 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 40 more
#VU124615 - Missing release of memory after effective lifetime
CVE-2026-3104		 CWE-401 Medium
No
No
 - 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 4 more
#VU124614 - Improper Check or Handling of Exceptional Conditions
CVE-2026-3119		 CWE-703 Medium
No
No
 - 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 4 more
#VU124613 - Operation on a Resource after Expiration or Release
CVE-2026-3591		 CWE-672 Medium
No
No
 - 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 4 more
#VU118636 - Improper input validation
CVE-2025-13499		 CWE-20 Medium
No
No
 - 20.11.2025 SB2025112010
SB2025112835
SB2025112836
and 16 more
#VU118635 - Improper input validation
CVE-2025-13674		 CWE-20 Medium
No
No
 - 20.11.2025 SB2025112010
SB2026040287
#VU117336 - Covert Timing Channel
CVE-2025-59438		 CWE-385 Medium
No
No
 - 17.10.2025 SB2025101717
SB2025101718
SB2025101719
and 9 more
#VU113442 - Out-of-bounds read
CVE-2025-49133		 CWE-125 Low
No
No
 - 30.07.2025 SB2025073028
SB2025073029
SB2025073030
and 24 more
#VU100751 - Improper input validation
CVE-2024-11596		 CWE-20 Medium
No
No
 - 21.11.2024 SB2024112101
SB2024112221
SB2024112222
and 6 more
#VU100750 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-11595		 CWE-835 Medium
No
No
 - 20.11.2024 SB2024112101
SB2024112221
SB2024112222
and 2 more
#VU98341 - Improper input validation
CVE-2024-9781		 CWE-20 Medium
No
No
 - 10.10.2024 SB2024101014
SB2024101448
SB2024101474
and 2 more
#VU98340 - Improper input validation
CVE-2024-9780		 CWE-20 Medium
No
No
 - 10.10.2024 SB2024101014
SB20250328435
SB2026040287


Showing elements 101 - 120 out of 232