Known vulnerabilities in Server Applications Module - page 3

Vendor: SUSE
Software: Server Applications Module
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 602
Public exploits: 37
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Server Applications Module Server Applications Module is affected by 602 known vulnerabilities: 5 critical, 45 high, 354 medium, 198 low Critical High Medium Low

Vulnerabilities (602)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146827 - Improper Handling of Exceptional Conditions
CVE-2026-42792		 CWE-755 Medium
No
No
 - 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 4 more
#VU146826 - Relative Path Traversal
CVE-2026-47078		 CWE-23 Medium
No
No
 - 02.09.2026 SB20260902104
SB20260902108
SB20260902112
and 1 more
#VU144930 - Heap-based Buffer Overflow
CVE-2026-34502		 CWE-122 Medium
No
No
 - 24.08.2026 SB20260824200
SB20260824221
SB20260824226
and 10 more
#VU144929 - Heap-based Buffer Overflow
CVE-2026-34501		 CWE-122 High
No
No
 - 24.08.2026 SB20260824200
SB20260824221
SB20260824226
and 9 more
#VU144928 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-34191		 CWE-89 Medium
No
No
 - 24.08.2026 SB20260824200
SB20260824226
SB20260824227
and 6 more
#VU144927 - Uncontrolled Recursion
CVE-2026-32327		 CWE-674 Medium
No
No
 - 24.08.2026 SB20260824200
SB20260824221
SB20260824223
and 12 more
#VU144926 - Information Exposure Through Timing Discrepancy
CVE-2025-49506		 CWE-208 Low
No
No
 - 24.08.2026 SB20260824200
SB20260824221
SB20260824226
and 10 more
#VU142646 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-6464		 CWE-74 High
No
No
 - 15.08.2026 SB2026081505
SB2026081506
SB2026082060
and 19 more
#VU142645 - Incorrect Permission Assignment for Critical Resource
CVE-2026-6469		 CWE-732 Low
No
No
 - 15.08.2026 SB2026081505
SB2026081506
SB2026082060
and 19 more
#VU142644 - Improper Authorization
CVE-2026-6470		 CWE-285 Low
No
No
 - 15.08.2026 SB2026081505
SB2026081506
SB2026082060
and 19 more
#VU142643 - Improper Authorization
CVE-2026-6471		 CWE-285 Low
No
No
 - 15.08.2026 SB2026081505
SB2026081506
SB2026082060
and 19 more
#VU142620 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-18408		 CWE-74 High
No
No
 - 15.08.2026 SB2026081505
SB2026081506
SB2026082060
and 19 more
#VU142619 - Heap-based Buffer Overflow
CVE-2026-19385		 CWE-122 Medium
No
No
 - 15.08.2026 SB2026081505
SB2026081506
SB2026082060
and 19 more
#VU136821 - Exposure of sensitive information to an unauthorized actor
CVE-2026-48855		 CWE-200 Low
No
No
 - 02.07.2026 SB2026070296
SB2026070301
SB2026070302
and 7 more
#VU136820 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-48856		 CWE-601 Medium
No
No
 - 02.07.2026 SB2026070296
SB2026071924
SB2026071925
and 5 more
#VU136814 - Improper Certificate Validation
CVE-2026-42789		 CWE-295 Low
No
No
 - 02.07.2026 SB2026070295
SB2026071567
SB20260902104
and 2 more
#VU136813 - Improper Validation of Certificate with Host Mismatch
CVE-2026-42790		 CWE-297 Medium
No
No
 - 02.07.2026 SB2026070295
SB2026071567
SB20260902104
and 2 more
#VU136688 - Out-of-bounds read
CVE-2026-54789		 CWE-125 Medium
No
No
 - 02.07.2026 SB2026070228
SB2026071939
SB2026071940
and 6 more
#VU125776 - Generation of Predictable Numbers or Identifiers
CVE-2026-28810		 CWE-340 Low
No
No
 - 10.04.2026 SB2026041031
SB2026041046
SB2026041047
and 4 more
#VU71754 - Integer overflow
CVE-2022-25147		 CWE-190 High
No
No
 - 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 49 more


Showing elements 41 - 60 out of 602