Known vulnerabilities in SUSE Linux Enterprise High Availability Extension 15 SP5

Vendor: SUSE
Version: SP5
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:*:*:*:*:*:*:*:*
Total vulnerabilities: 2670
Public exploits: 22
Known exploited (KEV): 4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise High Availability Extension 15 version SP5 SUSE Linux Enterprise High Availability Extension 15 SP5 is affected by 2670 vulnerabilities: 1 critical, 15 high, 77 medium, 2577 low Critical High Medium Low

Vulnerabilities (2670)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139941 - Out-of-bounds write
CVE-2026-6949
CWE-787 Medium
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU139942 - Out-of-bounds read
CVE-2026-58216
CWE-125 Low
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 16 more
#VU139943 - Resource exhaustion
CVE-2026-58218
CWE-400 Medium
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU139944 - Improper Access Control
CVE-2026-58221
CWE-284 Medium
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU139945 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-58222
CWE-89 Low
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU139946 - Improper input validation
CVE-2026-58224
CWE-20 Medium
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU139974 - Incorrect Permission Assignment for Critical Resource
CVE-2026-15779
CWE-732 Low
No
No
- 21.07.2026 SB2026072928
SB2026072935
SB2026072936
and 9 more
#VU132341 - Improper Access Control
CVE-2026-2340
CWE-284 Low
No
No
- 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 17 more
#VU132342 - Improper Certificate Validation
CVE-2026-3012
CWE-295 High
No
No
- 27.05.2026 SB2026052704
SB2026052705
SB2026052708
and 14 more
#VU132343 - NULL Pointer Dereference
CVE-2026-3238
CWE-476 Medium
No
No
- 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 13 more
#VU132344 - Command injection
CVE-2026-4408
CWE-77 High
No
No
- 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 20 more
#VU132345 - Command injection
CVE-2026-4480
CWE-77 High
No
No
- 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 18 more
#VU117239 - Out-of-bounds read
CVE-2025-9640
CWE-125 Medium
No
No
- 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU117238 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-10230
CWE-78 High
Public exploit available
No
- 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU116897 - Resource exhaustion
CVE-2025-61919
CWE-400 Medium
No
No
- 10.10.2025 SB2025101026
SB2025110346
SB2025110402
and 17 more
#VU116895 - Exposure of sensitive information to an unauthorized actor
CVE-2025-61780
CWE-200 Medium
No
No
- 10.10.2025 SB2025101026
SB2025110402
SB2025110465
and 6 more
#VU116636 - Improper input validation
CVE-2025-11230
CWE-20 Medium
No
No
- 06.10.2025 SB2025100656
SB2025100661
SB2025100663
and 19 more
#VU97643 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-45614
CWE-444 Medium
No
No
- 23.09.2024 SB2024092330
SB2024092459
SB2024092476
and 9 more
#VU85835 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-21647
CWE-444 Medium
No
No
- 26.01.2024 SB2024012625
SB2024012628
SB2024030762
and 10 more
#VU82971 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40175
CWE-444 Medium
No
No
- 10.11.2023 SB2023111025
SB2023111028
SB2024021549
and 8 more


Showing elements 1 - 20 out of 2670