Known vulnerabilities in SUSE Linux Enterprise High Availability Extension 15 SP4 - page 57

Vendor: SUSE
Software: SUSE Linux Enterprise High Availability Extension 15
Version: SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3189
Public exploits: 44
Known exploited (KEV): 17

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise High Availability Extension 15 version SP4 SUSE Linux Enterprise High Availability Extension 15 SP4 is affected by 3189 vulnerabilities: 1 critical, 28 high, 150 medium, 3010 low Critical High Medium Low

Vulnerabilities (3189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117239 - Out-of-bounds read
CVE-2025-9640		 CWE-125 Medium
No
No
 - 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU117238 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-10230		 CWE-78 High
Public exploit available
No
 - 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU116636 - Improper input validation
CVE-2025-11230		 CWE-20 Medium
No
No
 - 06.10.2025 SB2025100656
SB2025100661
SB2025100663
and 19 more
#VU116043 - Out-of-bounds read
CVE-2025-39869		 CWE-125 Low
No
No
 - 23.09.2025 SB2025092371
SB20251015148
SB2025101634
and 33 more
#VU114545 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-58239		 CWE-835 Low
Public exploit available
No
 - 28.08.2025 SB2025082897
SB20250918122
SB20250919197
and 23 more
#VU114282 - Use of Uninitialized Resource
CVE-2025-38608		 CWE-908 Low
No
No
 - 20.08.2025 SB2025082083
SB20250918122
SB20250919197
and 66 more
#VU114279 - Improper input validation
CVE-2025-38560		 CWE-20 Low
No
No
 - 20.08.2025 SB2025082079
SB20250918122
SB20250919197
and 36 more
#VU114242 - Use After Free
CVE-2025-38555		 CWE-416 Low
No
No
 - 20.08.2025 SB2025082030
SB20250918122
SB20250919197
and 71 more
#VU114130 - Missing release of memory after effective lifetime
CVE-2025-38546		 CWE-401 Low
No
No
 - 18.08.2025 SB2025081810
SB2025091305
SB20250918122
and 36 more
#VU113807 - Improper input validation
CVE-2025-38499		 CWE-20 Low
No
No
 - 11.08.2025 SB2025081153
SB2025081507
SB2025081508
and 94 more
#VU113806 - Improper Privilege Management
CVE-2025-38498		 CWE-269 Low
No
No
 - 11.08.2025 SB2025081152
SB2025081162
SB2025081163
and 99 more
#VU113313 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-38352		 CWE-362 High
Public exploit available
Exploited
 - 27.07.2025 SB2025072788
SB2025081507
SB20250816180
and 144 more
#VU113260 - NULL Pointer Dereference
CVE-2025-38460		 CWE-476 Low
No
No
 - 27.07.2025 SB2025072734
SB2025081507
SB2025081508
and 47 more
#VU112743 - Use After Free
CVE-2025-38323		 CWE-416 Low
No
No
 - 10.07.2025 SB2025071051
SB2025081507
SB20250818100
and 32 more
#VU112282 - Use After Free
CVE-2025-38180		 CWE-416 Low
No
No
 - 05.07.2025 SB2025070508
SB2025081507
SB20250818100
and 49 more
#VU111576 - Improper Locking
CVE-2022-50116		 CWE-667 Low
No
No
 - 20.06.2025 SB2025062067
SB2025072897
SB2025091305
and 23 more
#VU102056 - Use After Free
CVE-2024-53177		 CWE-416 Low
No
No
 - 30.12.2024 SB2024123078
SB2025021726
SB2025021727
and 33 more
#VU97643 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-45614		 CWE-444 Medium
No
No
 - 23.09.2024 SB2024092330
SB2024092459
SB2024092476
and 9 more
#VU85835 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-21647		 CWE-444 Medium
No
No
 - 26.01.2024 SB2024012625
SB2024012628
SB2024030762
and 10 more
#VU82971 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40175		 CWE-444 Medium
No
No
 - 10.11.2023 SB2023111025
SB2023111028
SB2024021549
and 8 more


Showing elements 1121 - 1140 out of 3189