Known vulnerabilities in SUSE Linux Enterprise Desktop 12-SP5

Vendor: SUSE
Version: 12-SP5
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_desktop:*:*:*:*:*:*:*:*
Total vulnerabilities: 312
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Desktop version 12-SP5 SUSE Linux Enterprise Desktop 12-SP5 is affected by 312 vulnerabilities: 32 high, 83 medium, 197 low Critical High Medium Low

Vulnerabilities (312)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128147 - Resource exhaustion
CVE-2026-31958
CWE-400 Medium
No
No
- 27.04.2026 SB20260427102
SB20260427109
SB20260427110
and 34 more
#VU120229 - Improper Authentication
CVE-2025-62349
CWE-287 Low
No
No
- 19.12.2025 SB2025121950
SB2025121951
SB2025121952
and 32 more
#VU120228 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-62348
CWE-94 Medium
No
No
- 19.12.2025 SB2025121950
SB2025121951
SB2025121952
and 32 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-67724
CWE-644 Low
No
No
- 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 35 more
#VU119884 - Excessive Iteration
CVE-2025-67725
CWE-834 Low
No
No
- 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 41 more
#VU119883 - Excessive Iteration
CVE-2025-67726
CWE-834 Medium
No
No
- 12.12.2025 SB2025121205
SB2025123045
SB2026010587
and 41 more
#VU119233 - Resource exhaustion
CVE-2025-13836
CWE-400 Medium
No
No
- 06.12.2025 SB2025120602
SB20251226352
SB2025123104
and 36 more
#VU109846 - Allocation of Resources Without Limits or Throttling
CVE-2025-47287
CWE-770 Medium
No
No
- 27.05.2025 SB2025052726
SB2025052727
SB2025052728
and 30 more
#VU106004 - Memory corruption
CVE-2025-1365
CWE-119 Medium
No
No
- 25.03.2025 SB2025032513
SB2025032515
SB2025032519
and 2 more
#VU105450 - Resource exhaustion
CVE-2025-27144
CWE-400 Medium
No
No
- 07.03.2025 SB2025030735
SB2025030736
SB2025030737
and 80 more
#VU104138 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-45339
CWE-59 Low
No
No
- 21.02.2025 SB2025022137
SB2025022138
SB2025022141
and 35 more
#VU104016 - Exposure of sensitive information to an unauthorized actor
CVE-2024-22037
CWE-200 Low
No
No
- 17.02.2025 SB2025021737
SB2025021738
SB2025021739
and 5 more
#VU103503 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11741
CWE-200 Medium
No
No
- 03.02.2025 SB2025020329
SB2025022148
SB2025022149
and 1 more
#VU103421 - Argument Injection or Modification
CVE-2025-21613
CWE-88 Low
No
No
- 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 27 more
#VU101972 - Security Features
CVE-2024-56326
CWE-254 Low
No
No
- 27.12.2024 SB2024122789
SB2024122790
SB2024122791
and 78 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744
CWE-1059 Low
No
No
- 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU101777 - Improper Authorization
CVE-2024-45337
CWE-285 Medium
Public exploit available
No
- 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU99259 - Improper Access Control
CVE-2024-8118
CWE-284 Low
No
No
- 22.10.2024 SB20241022375
SB2025021467
SB2025021742
and 1 more
#VU96048 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6837
CWE-79 Medium
No
No
- 15.08.2024 SB2024081534
SB2025021467
SB2025021742
and 1 more
#VU87538 - Resource exhaustion
CVE-2024-28180
CWE-400 Medium
No
No
- 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more


Showing elements 1 - 20 out of 312